CmdID

CmdID / Files

SystemPropertiesPerformance.exe

Change Computer Performance Settings file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SystemPropertiesPerformance.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionChange Computer Performance Settings

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe · signed by Microsoft Windows

f1c3ab54163c04ae81f1058946244a5d77c34facd9fa01a212e8f4829e5d8299

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SystemPropertiesPerformance.exe · signed by Microsoft Windows

f4cea38dd491dff69d5f7a07c69b41723b58a8a8122ec940922b18b8c4e8e42a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SystemPropertiesPerformance.exe · signed by Microsoft Windows

87d18b8ac27c3a0510b194fd6d5f36fe0aafacb9f57f723e98aa6874dca501fc

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SystemPropertiesPerformance.exe · signed by Microsoft Windows

b266318d45a4245556a2e39b763f2f11eca780969105f6f103e53dd0a492bb30

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SystemPropertiesPerformance.exe · signed by Microsoft Windows

6f433c5b8cda5e93b7d70ff253bda8c997794646362c5e7e5e05958c869d9f05

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SystemPropertiesPerformance.exe · signed by Microsoft Windows

8e4213fce4baeb0be9b44e90395a90023b0486207215cbe8adb2a1905befd5e6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SystemPropertiesPerformance.exe · signed by Microsoft Windows

2348acb60563ca0997da7378e5454515937ef9d54000a5e2e7fb5c81495896af

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\SystemPropertiesPerformance.exe · signed by Microsoft Windows

357bdad469524cdf42680ff44e17ce41c64b38872c4f55e89de0560fbd003693

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\SystemPropertiesPerformance.exe · signed by Microsoft Windows

1295b8e29768db51c8b196e35dee4a905922baf44201fe39bf65f35747f55034

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\SystemPropertiesPerformance.exe · signed by Microsoft Windows

de086b6c05d187f59fe5450a8c0cf8b48e1e7eef191802983c4c7715ae38aa6d

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\SystemPropertiesPerformance.exe · not signed

301c2d21719887eb70aa3d87a6bfe7beda0bdaa1762f3ec53c3f0c8149e51ff6

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\SystemPropertiesPerformance.exe · not signed

46d6ed59a5659c7698e2879663287e814eb8f54a5cb782592c730e4b73f18411

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.