setupcl.exe
System Clone Tool file version info
Program on Windows 6 known copies with hashes
Is it the real setupcl.exe?
C:\Windows\system32\6 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\setupcl.exe · signed by Microsoft Windows
2261dde4ced8070789590c6d2d49c2adc46cd7b5eb321c1e04376c8566623d6b10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\setupcl.exe · signed by Microsoft Windows
913c6ecfeb0e6b7347682c7ca9e7bf5cf5d875bb52e7a4332d305b10c5f16db110.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\setupcl.exe · signed by Microsoft Windows
faf238cacf661038ec19c3699a16a5007f42bd6d776542a17efa8a868ddf8f8810.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\setupcl.exe · signed by Microsoft Windows
319f6b8916b14029f541813354850d9f5526028de35a44c873ff4a3f8278de3510.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\setupcl.exe · signed by Microsoft Windows
1b1b640c85133adbdb25234128a569ef0bb725ed359abda958e6d08740187cdd6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\setupcl.exe · not signed
76f27f61ab0c29b971e18ab1aacc2d4a311f0d0ef18ac65524821711f75ce14dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.