CmdID

CmdID / Files

UpgradeResultsUI.exe

Add features to Windows Results file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real UpgradeResultsUI.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAdd features to Windows Results

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\UpgradeResultsUI.exe · signed by Microsoft Windows

77dc08ebbf873e7956a864343e424496e3db3ebe23e952102ad90407f000d608

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\UpgradeResultsUI.exe · signed by Microsoft Windows

e0bacf2fe7ff684fa46ca255d4eba2f25e290af4837c1652bd315424b50f9a74

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\UpgradeResultsUI.exe · signed by Microsoft Windows

164a49c7da9fe7464ceda803d5d4a40c46b7fb15da68887f2f243ab07cd11456

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\UpgradeResultsUI.exe · signed by Microsoft Windows

bc67e0619dd6a6da18da1bb60fa226dc83666a460f41d994507774cba09fd6bb

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\UpgradeResultsUI.exe · signed by Microsoft Windows

49541acf4cbfba971f60263d6619d76803ed0d6ec9556d24fe2a7c07eb56a8a9

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.