pdbcopy.exe
Microsoft PDB Copy Utility file version info
Program on Windows 4 known copies with hashes
Is it the real pdbcopy.exe?
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\4 known copies
14.00.23615.0 built by: VCTOOLSREL · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\pdbcopy.exe · signed by Microsoft Windows Kits Publisher
9a1492aa8f2942f467116dae96f97dfb7bea9750099257c1604af53a1209a48a14.00.23615.0 built by: VCTOOLSREL · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\pdbcopy.exe · signed by Microsoft Windows Kits Publisher
ae306791065f68c365bb876ab51201cc8a3646b9b1f9b1278afb083cf1f9939214.00.23615.0 built by: VCTOOLSREL · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\pdbcopy.exe · signed by Microsoft Corporation
d97e952b341cd01161d879f77b8f88c7caa95f5562e018ce9a7828d8aebac1b714.00.23615.0 built by: VCTOOLSREL · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\pdbcopy.exe · signed by Microsoft Corporation
f10d2233c4b65088e30242041b95fc7d839bff1ef239aa722916a497ce45aa5bFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.