CmdID

CmdID / Files

upfc.exe

Updateability From SCM file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real upfc.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionUpdateability From SCM

4 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\upfc.exe · signed by Microsoft Windows

a672aaf91982a2b84e05ab159d8bdd8eb1162061fa86e0ed33d9678da373f973

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\upfc.exe · signed by Microsoft Windows

ee44fe14df89c4e5eaf8398f8fb4823fd910c5a94d913653d6b9e831254f6cc2

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\upfc.exe · signed by Microsoft Windows

e8cd4661b393a1a66e02257672f2940de10a6ee8c06f9121a8787bffc49ad430

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\upfc.exe · signed by Microsoft Windows

ae4b0e81c601521da974d53e44295c98331ced7c9cc2f260434e6bc0c475dda3

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.