CmdID

CmdID / Files

setx.exe

Setx - Sets environment variables file version info

Program on Windows 12 known copies with hashes Command setx

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real setx.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSetx - Sets environment variables

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\setx.exe · signed by Microsoft Windows

18c8e1f5907defcf4881f6a60dfa8a053aeff78ee4cad97f88d17b060503f10f

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\setx.exe · signed by Microsoft Windows

586d6111428f263847009b670fdc4d13f10cd4843ba415b772c409b58948510e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\setx.exe · signed by Microsoft Windows

84a5ce53747dde0fbd2a9e94fd668591fbb7bde1bbee25a84a9e6216159dcb3a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\setx.exe · signed by Microsoft Windows

f207f3bf4b4d3f2c73db94baa69ce81cc0675f7c638b5d747c8c46f4323a2f44

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\setx.exe · signed by Microsoft Windows

4a59af81f7d99a53daee587bdaf77d97314e5592e2348b414282054e4913266a

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\setx.exe · signed by Microsoft Windows

f72ddc48fc41f51499263f193020c8f0ca9a071c3d5462538af9e56f7e812a04

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\setx.exe · signed by Microsoft Windows

4df07bc2f74879a6f190922cedafb9652f6488de0084fe91c6b62e62955a3a0a

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\setx.exe · signed by Microsoft Windows

930ef8d553d8cdee74724955431f13efdb1be212bc615e67a3cfd4d1a74d3497

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\setx.exe · signed by Microsoft Windows

266f8d4cd89a7881b3d70035a76b6f79e4e57fd9aa5b0869c0c3a132297ce58a

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\setx.exe · signed by Microsoft Windows

f6c20edd98b353e84e85a0c4d55b5f0f2a9dfa3c4f8c41624a92c1d908573195

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\setx.exe · not signed

867a772036dddc29ac5b54da4d6e53a1a84bf6f9deaacfe2361df5d9cfb8d26f

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\setx.exe · not signed

8835a72592f8a7da8ffc8d058410d0175cb1905b018906f22b922dc1180c4027

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.