CmdID

CmdID / Files

makecert.exe

ECM MakeCert file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real makecert.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionECM MakeCert

3 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\makecert.exe · signed by Microsoft Windows Kits Publisher

0bd928fc54556118c6ed2e83deac9b220af29af604acfb5db7a37202a48045ef

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\makecert.exe · signed by Microsoft Corporation

2a3fca2fdd446417c877479210e6a3095c2f996669a0df86c2a865e1ee6e0b51

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\makecert.exe · signed by Microsoft Corporation

808e43ac6bf1a5c21c6dd3cbdcf32b8c9caae2c078d57080cd11bf564ed16242

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.