CmdID

CmdID / Files

RunLegacyCPLElevated.exe

Run a legacy CPL elevated file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real RunLegacyCPLElevated.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionRun a legacy CPL elevated

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\RunLegacyCPLElevated.exe · signed by Microsoft Windows

44fc82316035ae38270cd762208017c4f741c945d3f34cfd881b237209199e62

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\RunLegacyCPLElevated.exe · signed by Microsoft Windows

f4adb5b5d7ad1624dc30b42d207ad78c57b2d00f247a00e474e05378ad3948d0

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\RunLegacyCPLElevated.exe · signed by Microsoft Windows

56132c62671c38c162dc4712f71213ba818fe369604c29572c95d7bb5c88e800

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\RunLegacyCPLElevated.exe · signed by Microsoft Windows

e3f8c10ee5fe36cbfeed2af0eda485059459c5696ed0b54ea24ba6b7697f4589

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\RunLegacyCPLElevated.exe · signed by Microsoft Windows

6b9abe6d04f72abfc70b28bd63458143d18e88c86effe237a8942bc79c78d049

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\RunLegacyCPLElevated.exe · signed by Microsoft Windows

a5d2822a9320ba090196051684054bf7f30abc42d8e0c95b9aa0800a30bb1cac

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\RunLegacyCPLElevated.exe · signed by Microsoft Windows

8809b4eec6249da237d5aa0d49dd73c4ceb40d0df52f1dd0ea9dd5e13360f0ed

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\RunLegacyCPLElevated.exe · signed by Microsoft Windows

d74c1659560e1244d9097a3f61de5a588c4bace7f5e6676b5d65bbed6ff1675c

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\RunLegacyCPLElevated.exe · signed by Microsoft Windows

95ce1953b48f06f4363bdb6b2ea001529b926c571254f1494ef5c74a1d52dbc8

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\RunLegacyCPLElevated.exe · signed by Microsoft Windows

9c40346667459043bf1e0b95e6dbad015313a9bd59ef377e0f1deefc7a8ec61a

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\RunLegacyCPLElevated.exe · not signed

b820ed135975f062802abeeb232addc9a3a75102d4fb69f725df1a0e7396e896

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\RunLegacyCPLElevated.exe · not signed

c012e68998876c825a757887ee04b0a4a856504a7257cd2f29f592ec9c5f200f

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.