CmdID

CmdID / Files

makecat.exe

Microsoft Trust Make Catalog utility file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real makecat.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Trust Make Catalog utility

3 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\makecat.exe · signed by Microsoft Windows Kits Publisher

35049d0e21f810d69059a54711c58e954b3c671ab15c54d482019e4411d4cdc0

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\makecat.exe · signed by Microsoft Corporation

3bad3d4de456a36a03f283d66b1a3b4cf292127dd8214315d73833d8f6b0df9e

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\makecat.exe · signed by Microsoft Corporation

5c682e270a395aafb8bd9fd3b3366e7fb599002aa0358466d53ed6be0b7db843

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.