DataStoreCacheDumpTool.exe
Program on Windows 8 known copies with hashes
Is it the real DataStoreCacheDumpTool.exe?
C:\Windows\system32\8 known copies
Version not recorded · C:\Windows\system32\DataStoreCacheDumpTool.exe · signed by Microsoft Windows
2c67d8b1ba2325d61b7a4cca7f7a491d31c2cb1ea9522146a12e85ec7b19f86cVersion not recorded · C:\Windows\system32\DataStoreCacheDumpTool.exe · signed by Microsoft Windows
49b08dcc3302b5e01c24fe3088ba30062c9790c2bfe0e020f5b288301c9f0521Version not recorded · C:\Windows\system32\DataStoreCacheDumpTool.exe · signed by Microsoft Windows
77dcca58d53bb9333014e1258b9c2b52f752a30cdb10a008a3188bb7c28e5a50Version not recorded · C:\Windows\system32\DataStoreCacheDumpTool.exe · signed by Microsoft Windows
951882eb8722f03e0693c7242808002fc6e521456796d79a50a4e958c360cae9Version not recorded · C:\WINDOWS\system32\DataStoreCacheDumpTool.exe · signed by Microsoft Windows
9532923c2590008828eac235600bbe5de576baf1afef8e30e0a47ffa7eae7e14Version not recorded · C:\Windows\system32\DataStoreCacheDumpTool.exe · signed by Microsoft Windows
a751ed722c10fcf97ee15c98214032c4537929b09ce752a840200e6b6bc9e032Version not recorded · C:\WINDOWS\system32\DataStoreCacheDumpTool.exe · signed by Microsoft Windows
e1c11992c8ff54f2af303dacbcaf723887de129b3b9b9c147b1da1e4ddfeaebfVersion not recorded · C:\Windows\system32\DataStoreCacheDumpTool.exe · signed by Microsoft Windows
f27ab8b4496b88e407fd4ab3af93aed6fe7719f96d4993cdc64cb038659afda9From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.