CmdID

CmdID / Files

charmap.exe

Character Map file version info

Program on Windows 10 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real charmap.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCharacter Map

10 known copies

5.2.3668.0 · C:\Windows\system32\charmap.exe · signed by Microsoft Windows

25e722d47ea9421b38e41059c73077606caee3ef6b6e4885e3d59f80e014b1d8

5.2.3668.0 · C:\Windows\system32\charmap.exe · signed by Microsoft Windows

62e3f767f4867a067ba102970ee7ce4b925f22c35f064ec764a5a67ce163f3a1

5.2.3668.0 · C:\WINDOWS\SysWOW64\charmap.exe · signed by Microsoft Windows

81074bd7a4449be98feed095d138dfd9ef1464fd00f40c9d92d678f45dc7f354

5.2.3668.0 · C:\WINDOWS\system32\charmap.exe · signed by Microsoft Windows

8b036155b9063297254ec1a3410c0cdac98c465bad29c8329955e89daf64116a

5.2.3668.0 · C:\Windows\SysWOW64\charmap.exe · signed by Microsoft Windows

8ed28e5d7f203043c314f4b635b1cff14d4de510f37d44b7538115d98a1e538e

5.2.3668.0 · C:\Windows\SysWOW64\charmap.exe · signed by Microsoft Windows

9d1955f3a5a98c6bf6886280d3b6736163b6f05dc06a10cb89a152c5b8d43bfc

5.2.3668.0 · C:\WINDOWS\system32\charmap.exe · signed by Microsoft Windows

cf3bec639b935e1813558836274bd130b4f3974d537afdbe653c72d6d4806b0b

5.2.3668.0 · C:\Windows\SysWOW64\charmap.exe · signed by Microsoft Windows

e3f7f0cc0cb19faa1549b6648e16846e4d981f14e6b2b731c15b2e57d9d791c4

5.2.3668.0 · C:\WINDOWS\SysWOW64\charmap.exe · signed by Microsoft Windows

f102231a3b36da44ef8fbf2e9f6ea13d24f0bd4935d76922d0bc6882bfebee7c

5.2.3668.0 · C:\Windows\system32\charmap.exe · signed by Microsoft Windows

fbeabc298ecdea381161a1da6881923b29fd7b1861a7b1779ce8011e401f8f81

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.