CmdID

CmdID / Files

Dxpserver.exe

Device Stage Platform Server file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Dxpserver.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDevice Stage Platform Server

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Dxpserver.exe · signed by Microsoft Windows

d16d31b1adb8ef8d5475acf6ea86148ac48f14434d5a3a03f8d23c07712a9aa7

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Dxpserver.exe · signed by Microsoft Windows

aed8102fdb7970d607f0a8b525f9240e26d106b6b2b0dcf2b529a1d8d8e3f2af

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Dxpserver.exe · signed by Microsoft Windows

b1081651ac33610824e2088ff64d1655993dd3d6073af1e5ffe0b4a0027f502f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Dxpserver.exe · signed by Microsoft Windows

f44a11662ddce5be2c68d17529717ac61799bacacaebf1d264f0692dcff297e6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\Dxpserver.exe · signed by Microsoft Windows

914714ac5287f34e5c836abd6bd918c8f68fcb805990ef7bab378bfe4da27f44

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\Dxpserver.exe · signed by Microsoft Windows

55b7e34965532077a36b9641c9e8d70aea2aae40afe8d53f56e0cc9b5f36a96d

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\Dxpserver.exe · not signed

775455b1c787d54bc1300fd3fd2233bbb3d243b673d25b53b75e1691e4cb06e4

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.