CmdID

CmdID / Files

SgrmLpac.exe

System Guard Runtime Monitor LPAC file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SgrmLpac.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSystem Guard Runtime Monitor LPAC

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SgrmLpac.exe · signed by Microsoft Windows

e4ceb3dbb2a34a81588ba822c06a2bca2e6e3566a554fade35acae43df90d8dd

10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\system32\SgrmLpac.exe · signed by Microsoft Windows

249b9a3a875af413328bc559620fec131a0db707cb6b46001c752adcf3e043df

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SgrmLpac.exe · signed by Microsoft Windows

a48549b91d712fd6f0117aa6a3da2113eb60f712df3bf30c3beb74637cc29bf7

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SgrmLpac.exe · signed by Microsoft Windows

2234c38f940853aef64945290ecfb8d9a46ea66ff89451edb1fa84c11a2b064e

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\SgrmLpac.exe · signed by Microsoft Windows

68601caee437fdd4cc9c85ec4f10344e4e13fcfc1597656978b541042fc8beec

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.