CmdID

CmdID / Files

dumpexam.exe

Windows Dump File Examiner file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real dumpexam.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Dump File Examiner

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\dumpexam.exe · signed by Microsoft Windows Kits Publisher

05a984386c04dee06872c06908a8df2215a31f0e366bdd1065b038a3f07d78d4

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\dumpexam.exe · signed by Microsoft Windows Kits Publisher

42cf132e19a15672663427af2819e5be4fa8702f3d9a7fb3e47e1e46157c163d

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\dumpexam.exe · signed by Microsoft Corporation

a2d4658b878f6b822d3473fcf4382997a661cb85da8739b59276fcaf94f76e6d

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\dumpexam.exe · signed by Microsoft Corporation

d034c7e7e5a18c42e26ae7914d0049c3c4cf1a7016586cddd136d99dc810e733

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.