CmdID

CmdID / Files

DeployUtil.exe

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real DeployUtil.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
Signed byWindows Phone

4 known copies

Version not recorded · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\DeployUtil.exe · signed by Windows Phone

0fb36938fee6711d0b729f44df4ef1292706f856c47ae5d2b301ee1b5a844dce

Version not recorded · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\DeployUtil.exe · signed by Windows Phone

27830c256d42ab96cf21aaf48c083ef3e62fe13fc4e9b03222568aac055add61

Version not recorded · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\DeployUtil.exe · signed by Windows Phone

3c2888f1bdbe75a9df1b9b3bc6578705d1fd5efb9f5ae36d2ce369859474886a

Version not recorded · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\DeployUtil.exe · signed by Windows Phone

5989030095450ac23d425372e448516f67f14525b244fba2c09ab693c1cd9488

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.