CmdID

CmdID / Files

SystemPropertiesRemote.exe

System Remote Settings file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SystemPropertiesRemote.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSystem Remote Settings

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SystemPropertiesRemote.exe · signed by Microsoft Windows

b05de2dac6f6da8231c29405955b42cabbca6ce8058eed72a0f7df1395a7f777

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SystemPropertiesRemote.exe · signed by Microsoft Windows

fe1627c6cdc27e3b2c617fb694beba68e72de63e67ee5fa92c580b16280d8618

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SystemPropertiesRemote.exe · signed by Microsoft Windows

75f0b2b0123cdac9d250bcb51bcd79332e2ecc9f371850c058246d80c9886b6a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SystemPropertiesRemote.exe · signed by Microsoft Windows

7984e2bff295c8dbcbd3cd296d0741e3a6844b8db9f962abdbc8d333e9a83932

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SystemPropertiesRemote.exe · signed by Microsoft Windows

1dac21ef52976951ba2e0da92b4d489768c98f7e39902d324909959f343f265f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SystemPropertiesRemote.exe · signed by Microsoft Windows

95131c527805752c2443f2dba44480a505a1d9c9f58e238b8cce0d6c684d5df9

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SystemPropertiesRemote.exe · signed by Microsoft Windows

76c62b0dc6d0eec97ce4af5dbf7658c6025147ef73653c8e0ce33c15cf4d8570

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\SystemPropertiesRemote.exe · signed by Microsoft Windows

e0178c05597090522e268645d572622acf91aca4ef91ddb87f8e7fb14b66b67b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\SystemPropertiesRemote.exe · signed by Microsoft Windows

0c0ccf03bc17f570030e68326ac7e16d542f0bb1eeb4dd735f82468ba19aa388

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\SystemPropertiesRemote.exe · signed by Microsoft Windows

6b5615f5c7168a096de2678b93c7be6b96f9e2dbc2d27d6e42537f8c4bd046d8

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\SystemPropertiesRemote.exe · not signed

6cdf50261b306f1090de1c25d516fa9f402ce329b1d5475560ea980da212368f

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\SystemPropertiesRemote.exe · not signed

c05a82102108ebb43c71a5d621604f1500d4b22794e82969e59d16683f2f6d95

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.