gui.exe
Program on Windows 4 known copies with hashes
Is it the real gui.exe?
C:\program files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\setuptools\C:\Program Files\Blender Foundation\Blender 2.90\2.90\python\lib\site-packages\setuptools\C:\program files\GIMP 2\lib\python2.7\site-packages\setuptools\4 known copies
Version not recorded · C:\program files\GIMP 2\lib\python2.7\site-packages\setuptools\gui.exe · not signed
334396774842d31c0a3ebceb26feb3a1d2072f559b7a6cea62956cade1012f66Version not recorded · C:\Program Files\Blender Foundation\Blender 2.90\2.90\python\lib\site-packages\setuptools\gui.exe · signed by Stichting Blender Foundation
5d87a88349ef1b7e0b3469336c90f1d30349710ac5b17d44b889d0c22fa99722Version not recorded · C:\program files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\setuptools\gui.exe · signed by Stichting Blender Foundation
68a3a048496211e45bd24537d43d77838a1b8cc71de45a4d534b7d07e6d3f273Version not recorded · C:\Program Files\Blender Foundation\Blender 2.83\2.83\python\lib\site-packages\setuptools\gui.exe · signed by Stichting Blender Foundation
905c980a9666ee16420b6405475d7c5a3fe259a3e6df8c97257c86619d88cfafFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.