CmdID

CmdID / Files

list.exe

Microsoft File Lister file version info

Program on Windows 3 known copies with hashes Command list

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real list.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft File Lister

3 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\list.exe · signed by Microsoft Windows Kits Publisher

a7dc325d7203a7e9bc1511bd71231821e17c865e96f3d4311165c4e2002a59d4

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\list.exe · signed by Microsoft Corporation

ac1a48b17543a37655b1befde747bfdd99360a86f41e6e84c1f828c5db6bbf2d

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\list.exe · signed by Microsoft Corporation

dfa26fb6ac35987ef743ef64a3bc849e7dcc1c6f5b954368f6a3b03a928424ac

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.