dbengprx.exe
Microsoft Windows Debugger Transport Proxy Server file version info
Program on Windows 4 known copies with hashes
Is it the real dbengprx.exe?
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\4 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\dbengprx.exe · signed by Microsoft Windows Kits Publisher
00242a3473e703158206d562d5147badb883de15a1b4311d47d6247542677e3810.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\dbengprx.exe · signed by Microsoft Corporation
0d535a4065ba70ef55d2c996f1ae1d7ec07ff90ff955067eea9d8f6d411c44e710.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\dbengprx.exe · signed by Microsoft Corporation
7b20aa2bafa06805c8b827cdc80a680fc7e6d2a56c539eb95f684fe13156411510.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\dbengprx.exe · signed by Microsoft Windows Kits Publisher
f151ef9ca24c44ba9a666e5d626cfca5051fd594296dfd622fffa93c9c366411From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.