CmdID

CmdID / Files

WpcMon.exe

Family Safety Monitor file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WpcMon.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionFamily Safety Monitor

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WpcMon.exe · signed by Microsoft Windows

c9a2de2340cd9c4abb0cf3dd7cbb4067fe4ec7060c468ed5a4af6929f870e528

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\WpcMon.exe · signed by Microsoft Windows

3b6bc46957d9e3f80b779c49cf7bc3fb4cbe36146846e403fb32d099f9a1377a

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\WpcMon.exe · signed by Microsoft Windows

4f81bccca5a891c4ea0205973002ae91a18962b882e02b73d76bd72e1c1f1918

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\WpcMon.exe · signed by Microsoft Windows

5bbaa50d2b9d2242cb2f83c0bef935ea170736286813b2a774c36fde34d44588

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WpcMon.exe · signed by Microsoft Windows

aec28b35cc1fe750a13e66a9c4b4f8b936126e486d80e2ff6dae74a0d61e47c2

10.0.18362.752 (WinBuild.160101.0800) · C:\WINDOWS\system32\WpcMon.exe · signed by Microsoft Windows

8d7bf6d012073f58f326c2682b4a1b2a24c9bca28dc040c0a07cbee5f741cf71

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.