CmdID

CmdID / Files

adpcmencode3.exe

ADPCM encoding and decoding utility file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real adpcmencode3.exe?

file version info and known copies
Original nameAdpcmEncode.exe in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionADPCM encoding and decoding utility

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\adpcmencode3.exe · signed by Microsoft Corporation

cfc7fc6b150839c6e4591cab1e4e518492fcde547b5d41acaebc541251ad397d

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\adpcmencode3.exe · signed by Microsoft Corporation

e848e0a5384e2a0b0ff8b871598132d7a04bb809a35a9ed274f3f0fbf2adad3d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.