wmpnscfg.exe
Windows Media Player Network Sharing Service Configuration Application file version info
Program on Windows 2 known copies with hashes Command wmpnscfg
Is it the real wmpnscfg.exe?
Installed in
C:\Program Files\Windows Media Player\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Media Player Network Sharing Service Configuration Application
2 known copies
12.0.19041.1 (WinBuild.160101.0800) · C:\Program Files\Windows Media Player\wmpnscfg.exe · signed by Microsoft Windows
42cf12cce4c991c6c2c93147fee7d3193341c03b2a65938f521acc7000c4a6d512.0.17763.1 (WinBuild.160101.0800) · C:\Program Files\Windows Media Player\wmpnscfg.exe · signed by Microsoft Windows
e8e9e1c1384552e8a3e6cf6343118727221f115f348f72e6fdca6ffc82a10620From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.