CmdID

CmdID / Files

SystemPropertiesDataExecutionPrevention.exe

Change Data Execution Prevention Settings file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SystemPropertiesDataExecutionPrevention.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionChange Data Execution Prevention Settings

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

81f19f368899f985d97fc0e2be6c9719975dfc2912534642076a5b2f6de2eb55

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

d4abbb53a0f6c229c4cdfda4b165fdcea14b097a79da04d76f23e5ed23d3c64b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

1f810658969560f6e7d7a14f71d1196382e53b984ca190fa9b178ac4a32acfb3

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

58b01eaca5604fc46b170aa8c6eac22c7b9ddc00ced8f1832530907df2ec4189

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

09015b6055d7cf5bc4eda7442ed13c2ebb2d332062e59d439de11f1fc3983d5f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

28d26d923aff98f5cccf97177f55d6a034d97857d6a6d0a8d11c8b47156bd61f

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

2a68e97cbc5eb55c687e7499a08b827910619feeb5674a980e5e118d382416cf

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

51259f775be738ce33c857b7777e88c8b6a9afe0c3202e99d4c76f688f315424

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

398262918781543c2e9db65073a5c4be3b5a4223213208f12a93b1265963917a

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe · signed by Microsoft Windows

a94ec9110eabd40f7d3d54fe9864a6cb78e04ac8b253463ff2ce3f78a3bcb6b9

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\SystemPropertiesDataExecutionPrevention.exe · not signed

852ab850dee2e3974a9db87f2010889c7407123166b0b4e3ebc816dfebb2f1af

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\SystemPropertiesDataExecutionPrevention.exe · not signed

d32d4777ef26172d50ca4247a6866d7d3fa1ed746dba252f3e1f0af37a2c5fbd

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.