CmdID

CmdID / Files

DTUHandler.exe

DTUHandler file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real DTUHandler.exe?

file version info and known copies
Original nameDTUHandler.dll in the file’s header: a renamed copy still carries it
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDTUHandler

3 known copies

10.0.19041.844 (WinBuild.160101.0800) · C:\Windows\system32\DTUHandler.exe · signed by Microsoft Windows

364b839cbafc47942a04c05fbc8c0d96c5aa381ffe1fc60f26d429f7c5ffaa94

10.0.19041.153 (WinBuild.160101.0800) · C:\Windows\system32\DTUHandler.exe · signed by Microsoft Windows

72b7b45dcab185602d127ce4e70cbaee63f83d7c9f16a0b82b559888481cd39e

10.0.18362.719 (WinBuild.160101.0800) · C:\WINDOWS\system32\DTUHandler.exe · signed by Microsoft Windows

6387539c400019f96fc55ae4d5c966bd798d199715f1388ce89e7348d23aa14f

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.