CmdID

CmdID / Files

dispdiag.exe

Display Diagnostics file version info

Program on Windows 6 known copies with hashes Command dispdiag

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real dispdiag.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDisplay Diagnostics

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\dispdiag.exe · signed by Microsoft Windows

9ce5db462b01baaf505a5405b9a77797deaaf6ba435aacddef4322c39da61736

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\dispdiag.exe · signed by Microsoft Windows

89808fecda2b63d1a16c42748c4905324983f66aa20eaa704f39f251ccce7b7a

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\dispdiag.exe · signed by Microsoft Windows

fbc924d365f233c0d5d634004f77befbd688c3cd137559ce8c998e8251d5daca

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\dispdiag.exe · signed by Microsoft Windows

0b5e810c20fc5e8906aa993bb09ea021982c95a8244c2d56518ea16d22f16362

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\dispdiag.exe · signed by Microsoft Windows

2faff3700bf080d64d0997994c533b57816751e70893a158af6c7b47d9fd9301

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\dispdiag.exe · not signed

dc0dde1b7feed4184a181c2ce437a1b2f1b67da052105392e852654710da2132

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.