CmdID

CmdID / Files

dpnsvr.exe

DirectPlay Stub file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real dpnsvr.exe?

file version info and known copies
Original namewcodstub.dll in the file’s header: a renamed copy still carries it
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDirectPlay Stub

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\dpnsvr.exe · signed by Microsoft Windows

5cf4a8d9233ae1033788efe8f1296ffe64a314e1c38ccca33fbcbad8f3db4a7f

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\dpnsvr.exe · signed by Microsoft Windows

7cf4535e85ec02365c54bf460992344fe1e319381e794e51a7ce0f9cb0438929

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\dpnsvr.exe · signed by Microsoft Windows

4700cd164bfbc31f06146aaafdc18cec6754a61391f52b6b6f9ce407254cc932

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\dpnsvr.exe · signed by Microsoft Windows

c5b6515460587e3932bae23165de3e83a0a6bca20475220c21d1de1d74c0d000

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\dpnsvr.exe · signed by Microsoft Windows

a6ac48ac5b671c2ace2d5359ea55e9553ee96c15c0d2004f663af8f905936b5b

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\dpnsvr.exe · not signed

dfce551dd247936cb051bf7794c122ddb0ab3422686e57c4e1e7555c787b3dbb

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.