PinningConfirmationDialog.exe
PinningConfirmationDialog.exe file version info
Program on Windows 2 known copies with hashes
Is it the real PinningConfirmationDialog.exe?
C:\Windows\SystemApps\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\2 known copies
10.0.22000.120 (WinBuild.160101.0800) · C:\WINDOWS\SystemApps\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\PinningConfirmationDialog.exe · signed by Microsoft Windows
52163c8019affdd16754fc7c42f45e8c03f34c9be867cc3d96c84381d2582793SHA-123de80c5e804bfd254cb68a3624f21f09df38ea5MD5b1734c44bab5edaeb5601880e26185a910.0.19041.423 (WinBuild.160101.0800) · C:\Windows\SystemApps\Microsoft.Windows.PinningConfirmationDialog_cw5n1h2txyewy\PinningConfirmationDialog.exe · signed by Microsoft Windows
6f4b8b74cd58406db8a505d7c776607cfa77ee4337d9aedc4f009d99be52e0bdSHA-151bd51e685fcb139e482c3be5957e6c4aab5080aMD5b50c08efb73d902beb98faa4d516526cFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.