CmdID

CmdID / Files

printui.exe

Change Printing Settings file version info

Program on Windows 16 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real printui.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionChange Printing Settings

16 known copies

10.0.22000.194 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\printui.exe · signed by Microsoft Windows

23a565d862e7d01de92851ebc4263246d531ae69ea21483b14baf5d79e546102

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\printui.exe · signed by Microsoft Windows

d364449b387afc0a4345cb0f85f9f1c6d967dd2c4c37881d39f5d45b549b0db5

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\SysWOW64\printui.exe · signed by Microsoft Windows

0ccf0351c0e4e9e422d014f349b75f0cf9710e241cdd40fd48c6bab1e165fe66

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\SysWOW64\printui.exe · signed by Microsoft Windows

ea7f7e16eb943f560d2dbc758974e135ada4b61fe0b388ee5a721c3b24f4a8fb

10.0.19041.1237 (WinBuild.160101.0800) · C:\Windows\SysWOW64\printui.exe · signed by Microsoft Windows

085968c1b3f71fec8ee78ed5905e487c0f0bf6110f27397684b9cc66f6578583

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\printui.exe · signed by Microsoft Windows

065df0995e7dcce6b51c8b9e53125086ab15598e0445722b3a94f1bbf1a654bf

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\printui.exe · signed by Microsoft Windows

30ba375125e87d88106ec1b952af157caf9940dfc2cc382c56087db9f15a4fa6

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\printui.exe · signed by Microsoft Windows

7bcd2b18c8530f49c4a052a2d2419f38fe09d49489bd4975943abe36385400cf

10.0.18362.836 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\printui.exe · signed by Microsoft Windows

9b3f9df03f56e8c08dcc7a8e71925e1e8f8c8638dbf911ed9602e3c6951a9908

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\printui.exe · signed by Microsoft Windows

2ad9b6716c95db2d96eba509f6782c3b7ca9daffdbae44ecd1f96c0af646de82

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\printui.exe · signed by Microsoft Windows

0fd82b7b6f97df74df7c02b2cd79e9ae306ac5b66709874146f5d042aa8c38fc

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\printui.exe · signed by Microsoft Windows

eaf14cdf857db35360416939dbf04d08a0c9c8fa58acc63249ec501b3636f52a

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\printui.exe · signed by Microsoft Windows

08cf3fdd6134c9ad2a4d219613b7cb0d680d5cc29ab9731f8854d21e607e3f23

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\printui.exe · signed by Microsoft Windows

f29534ed122cd36141ddb4165d4f154997118aa9d2bb61cf1bd22037a74e9787

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\printui.exe · not signed

6b57c3c5c1965be12aae4024dacf3facb4657b93fd5e86a8f2d13648e27afdfa

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\printui.exe · not signed

876f3cee2ac8568386b870291e74bd976e8c56e267420072e4ddec3c4c2acf82

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.