CmdID

CmdID / Files

dsmgmt.exe

NT5DS file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real dsmgmt.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNT5DS

2 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dsmgmt.exe · signed by Microsoft Windows

6bf9fb668246b6aa81328d3fcc19360575e06c3fa0c98008c1810d5088b5da43

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\dsmgmt.exe · signed by Microsoft Windows

fbd635cc9dd65f705acc7a88060d9a1984aa724fa5ff962f63807b867bf637ac

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.