CmdID

CmdID / Files

DiskSnapshot.exe

DiskSnapshot.exe file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real DiskSnapshot.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDiskSnapshot.exe

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DiskSnapshot.exe · signed by Microsoft Windows

743f99dd39535fea2ef86530e6636b20e4bae872562d00caad81aca1e8b11018

10.0.19041.1081 (WinBuild.160101.0800) · C:\Windows\system32\DiskSnapshot.exe · signed by Microsoft Windows

f9a712caed73ec1392224aa13f48b154832151488e53410f1130cdf81aacf2ae

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\DiskSnapshot.exe · signed by Microsoft Windows

2af7212a150b721d0105928864df0049a4d959ad7b5b997df47ba69b434404b3

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DiskSnapshot.exe · signed by Microsoft Windows

4a60e5ebf54bc9edf9f78688acbdff19ca8c4affe29a836f78ca70396be848f7

10.0.17763.652 (WinBuild.160101.0800) · C:\Windows\system32\DiskSnapshot.exe · signed by Microsoft Windows

c7b9591eb4dd78286615401c138c7c1a89f0e358caae1786de2c3b08e904ffdc

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\DiskSnapshot.exe · signed by Microsoft Windows

9f677c2796047b08bdc6ee30fb9dd5c4bb0948726b34d97b880a46af580d0859

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.