CmdID

CmdID / Files

rsopprov.exe

RSoP Service Application file version info

Program on Windows 8 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real rsopprov.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionRSoP Service Application

8 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\rsopprov.exe · signed by Microsoft Windows

2afc95ac674762f8533b1be1a0035d2402bd3cdb5ccf940e0b5c45254b1e3f1c

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\rsopprov.exe · signed by Microsoft Windows

78809f6978278d5faebce418de0ebbac381b88071ddaf75dd827fff42312a1a1

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\rsopprov.exe · signed by Microsoft Windows

9e64203785bbe78a22f8f8f89603fc9e7706a4d36e28b5fd7667bf3fca49938b

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\rsopprov.exe · signed by Microsoft Windows

b67ab720f53058838dacb5266a30cb22dc6b3ca891ce80c6b2c185d4b0857807

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\rsopprov.exe · signed by Microsoft Windows

2d65a3b00155afc7721bdb64099752cfe14562d7e2c73fe050bc51401093b777

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\rsopprov.exe · signed by Microsoft Windows

6c38a3916eb963fd3e90db0e6fdf8e9f72055a471dfe186988d3d319e44e1bac

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\rsopprov.exe · not signed

417feff43085f5380344cf9c959dd90b1d1d30811e4e02184f85d7fdb7d3d0d6

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\rsopprov.exe · not signed

6f11cca3fe7e1d0d3437c76b61b8766ba6cd6eccabb22d6fc2032310e8ac6bcd

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.