CmdID

CmdID / Files

PrintBrmUi.exe

PrintBrm Application file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real PrintBrmUi.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPrintBrm Application

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\PrintBrmUi.exe · signed by Microsoft Windows

95aa9b53671b66e8f76084938f108a2867e17ea066ca54aa6cdc2176cb7cedac

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\PrintBrmUi.exe · signed by Microsoft Windows

4d2e80582318fcde61028fbc1a232d1ca604d9478cfae3982ae62501c3267228

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\PrintBrmUi.exe · signed by Microsoft Windows

da986c8ee401be63202f3e4fee92342709222d88d5db15ee3930dc8a3e332c24

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\PrintBrmUi.exe · signed by Microsoft Windows

75efc2ae3cc45eaafb97b12338bb424a6d7216e27d33778758f28b61334680ac

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\PrintBrmUi.exe · signed by Microsoft Windows

c66d4d5a57fb0a3266b9c194c86712c504720b8f1e666244c25f1c8689c23c27

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\PrintBrmUi.exe · signed by Microsoft Windows

3a32d9bcbb2daf49bc8601787030014b770262fa475e749af77f512e01d7bc5d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.