CmdID

CmdID / Files

RDSPnf.exe

Windows All-User Installer Profile Processing Module file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real RDSPnf.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows All-User Installer Profile Processing Module

4 known copies

10.0.17763.1432 (WinBuild.160101.0800) · C:\Windows\system32\RDSPnf.exe · signed by Microsoft Windows

bf40cb2b501fb0d61ceea0ec56967a7599447ed2480407620cb4baa1668f5f6c

10.0.17763.1007 (WinBuild.160101.0800) · C:\Windows\system32\RDSPnf.exe · signed by Microsoft Windows

ab7f9e3b49b697acdb4f99c1ac9fb482e3f1cdb717ba25cede88d440edcb2460

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\RDSPnf.exe · signed by Microsoft Windows

693ca6f133ea31b28ee57366d6fe01b055cfc4840edbd1a15f1b6f3a615520a4

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\RDSPnf.exe · not signed

296ddfd1c924c0eeaf42c33a56052e3157716adb8ac6f84c6ff4b52e6b972a67

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.