CmdID

CmdID / Files

GoogleCrashHandler64.exe

Google Crash Handler file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real GoogleCrashHandler64.exe?

file version info and known copies
Original nameGoogleUpdate.exe in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Google\Update\1.3.35.452\
C:\Program Files (x86)\Google\Update\1.3.36.112\
Signed byGoogle LLC
ProductGoogle Update, Google LLC
DescriptionGoogle Crash Handler

2 known copies

1.3.36.111 · C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe · signed by Google LLC

070875d941aaf2a4a01cd61dfbd1f7122b9bc4b6030341999e4c1aadcf93f271

1.3.35.451 · C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe · signed by Google LLC

7dd0d47a68655d37d6f5567fdedaf200aa60f341480fa2546a412139ab757970

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.