CmdID

CmdID / Files

gui-32.exe

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real gui-32.exe?

file version info and known copies
Installed inC:\program files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\setuptools\
C:\Program Files\Blender Foundation\Blender 2.90\2.90\python\lib\site-packages\setuptools\
C:\program files\GIMP 2\lib\python2.7\site-packages\setuptools\
Signed byStichting Blender Foundation

5 known copies

Version not recorded · C:\Program Files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\setuptools\gui-32.exe · signed by Stichting Blender Foundation

427aa0de4d8fbc0f01344e6eabaed5247ea844d44c4b652e169781fc895ad110

Version not recorded · C:\Program Files\Python38\Lib\site-packages\setuptools\gui-32.exe · not signed

5c1af46c7300e87a73dacf6cf41ce397e3f05df6bd9c7e227b4ac59f85769160

Version not recorded · C:\Program Files\Blender Foundation\Blender 2.90\2.90\python\lib\site-packages\setuptools\gui-32.exe · signed by Stichting Blender Foundation

7fc95e129bb7cb00f33226689f2165b30f6af3065842cd595f0ec3ea5f8b3793

Version not recorded · C:\program files\GIMP 2\lib\python2.7\site-packages\setuptools\gui-32.exe · not signed

881780d9a9eb35e24fb7c3b8c10caed9df2c5ea1f838e6576247569da6a8d35a

Version not recorded · C:\program files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\setuptools\gui-32.exe · signed by Stichting Blender Foundation

d72de1afafebe5a3f61ad086341903c27314c1535b90392f3703c63cf7643442

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.