CmdID

CmdID / Files

lpkinstall.exe

Language Pack Installer file version info

Program on Windows 9 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real lpkinstall.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionLanguage Pack Installer

9 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\lpkinstall.exe · signed by Microsoft Windows

47c19771459384c4960d43eaf547a4264dc7ee0d19b9cf58eccae0e9fdf666d4

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\lpkinstall.exe · signed by Microsoft Windows

6fcc665f66ccd1a139c5d4f2ec8c229deec9426976bd37dbf2b1a800d670120e

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\lpkinstall.exe · signed by Microsoft Windows

80d0ff5397b1270888cd4d63266ae31d86edc682e36a69b83cabe605e5616636

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\lpkinstall.exe · signed by Microsoft Windows

d3904780da4dfe30a49d39a1274247fcc2a2d1ae4ac09af2668a8902864f9dd5

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\lpkinstall.exe · signed by Microsoft Windows

03c286ff72ce9d3936e95acfeb3e5b58ee11270b5779e5335aac63bff63add15

10.0.17763.292 (WinBuild.160101.0800) · C:\Windows\system32\lpkinstall.exe · signed by Microsoft Windows

45b6520c82a66891989f40b5e36fa73e7465bba7115904e722dbe2f86f8ca7c2

10.0.17763.1457 (WinBuild.160101.0800) · C:\Windows\system32\lpkinstall.exe · signed by Microsoft Windows

af29ba348e7181f42bfa9d69b829c1049d7f1fa30c6909475a6e0bb5a2a3afdf

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\lpkinstall.exe · signed by Microsoft Windows

6f15e80b4e9cbd7741c129b68f15f6400f10df9a4474dc48104c09fab182e63b

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\lpkinstall.exe · not signed

71c660fd9bdc1b0677cc14930b5450b2489727526918551c39510025be2ca183

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.