CmdID

CmdID / Files

GoogleCrashHandler.exe

Google Crash Handler file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real GoogleCrashHandler.exe?

file version info and known copies
Original nameGoogleUpdate.exe in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Google\Update\1.3.35.452\
C:\Program Files (x86)\Google\Update\1.3.36.112\
Signed byGoogle LLC
ProductGoogle Update, Google LLC
DescriptionGoogle Crash Handler

2 known copies

1.3.36.111 · C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe · signed by Google LLC

413771b6008a8586383a918019345e431e576cc0f3638dff2fa7af73311de507

1.3.35.451 · C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe · signed by Google LLC

3c05caf977003005770bca7cd4c4586a3c2c2b749a5bb8659af50b8637f5ac5e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.