CmdID

CmdID / Files

dtdump.exe

DTDUMP.EXE file version info

Program on Windows 11 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real dtdump.exe?

file version info and known copies
Installed inC:\Windows\SysWOW64\
C:\WINDOWS\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDTDUMP.EXE

11 known copies

10.0.22000.65 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\dtdump.exe · signed by Microsoft Windows

bc7ac86dc77b02c1206a59adc6a2bf71f91f353c4052afddde54f4aff7f60d84

10.0.22000.282 (WinBuild.160101.0800) · C:\WINDOWS\system32\dtdump.exe · signed by Microsoft Windows

763669bb624269713bcb0fbee7b93d46d33161e81dfed5046ee23c53e4a8362d

10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dtdump.exe · signed by Microsoft Windows

c3fd85cca8b5ca64eec2205d356bb6a4d007057e9e340b44916e80be7f327246

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dtdump.exe · signed by Microsoft Windows

4b440553f1f1b69e3cad4de540fdcf3569f4205ac2accceec0689e069b446161

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dtdump.exe · signed by Microsoft Windows

a49905badf1a5f381658b60fa62c11e88d19f852204e73f52acbada5b1129f5d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dtdump.exe · signed by Microsoft Windows

37394e778ac33445e781055a73bbf223834b762aed7734ccc38881a28afda979

10.0.18362.815 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\dtdump.exe · signed by Microsoft Windows

5ddfcc764d8cdf251b20fe9e9903dd60ccdd7deb005e43af961185987cb6d69c

10.0.17763.1518 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dtdump.exe · signed by Microsoft Windows

6ee12f9e2ff2341f8c7acdfff069f33eb3733afabb79276d14cb3fd78d61ade5

10.0.17763.1397 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dtdump.exe · signed by Microsoft Windows

231cfc4b8ead3421cd1df85c8e06b3b9ec58680828ff505b648490164402c5c5

10.0.17763.1217 (WinBuild.160101.0800) · C:\windows\SysWOW64\dtdump.exe · signed by Microsoft Windows

a68fe02b27fc2744943f0457c1df6a59c34064957895a1fdc6bb7089d875e624

10.0.14393.351 (rs1_release_inmarket.161014-1755) · C:\Windows\SysWOW64\dtdump.exe · signed by Microsoft Windows

29be16ebcf4444c0ff6a6027cf36d6f39a5b661089f80fed2c6f015125cc17fc

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.