CmdID

CmdID / Files

pdbcopy.exe

Microsoft PDB Copy Utility file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real pdbcopy.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Visual Studio 2015, Microsoft Corporation
DescriptionMicrosoft PDB Copy Utility

4 known copies

14.00.23615.0 built by: VCTOOLSREL · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\pdbcopy.exe · signed by Microsoft Windows Kits Publisher

9a1492aa8f2942f467116dae96f97dfb7bea9750099257c1604af53a1209a48a

14.00.23615.0 built by: VCTOOLSREL · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\pdbcopy.exe · signed by Microsoft Windows Kits Publisher

ae306791065f68c365bb876ab51201cc8a3646b9b1f9b1278afb083cf1f99392

14.00.23615.0 built by: VCTOOLSREL · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\pdbcopy.exe · signed by Microsoft Corporation

d97e952b341cd01161d879f77b8f88c7caa95f5562e018ce9a7828d8aebac1b7

14.00.23615.0 built by: VCTOOLSREL · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\pdbcopy.exe · signed by Microsoft Corporation

f10d2233c4b65088e30242041b95fc7d839bff1ef239aa722916a497ce45aa5b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.