CmdID

CmdID / Files

gpfixup.exe

NT5DS file version info

Program on Windows 2 known copies with hashes Command gpfixup

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real gpfixup.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNT5DS

2 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\gpfixup.exe · signed by Microsoft Windows

5b030186ec1c03de8195bbfa242e80efa13d14a563bc41eebf2fc522e8b36977

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\gpfixup.exe · signed by Microsoft Windows

bb53fb2594005204781dd5a3a6f26ea59c5cf2333f666cfd970a460689da4fd3

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.