CmdID

CmdID / Files

plmdebug.exe

Microsoft PLMDebug file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real plmdebug.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft PLMDebug

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\plmdebug.exe · signed by Microsoft Corporation

114b63624e7b8baccbcfa73295bbfbea8613bc95dcc9ff1a3e2d0de87c044b62

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\plmdebug.exe · signed by Microsoft Corporation

37b375473839139dfb7291def96368c56979f7cefe66971ec6ecdf439e2d05c2

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\plmdebug.exe · signed by Microsoft Windows Kits Publisher

7a563b3013e8447d00fdec632c70b707d3c8514ab1116612a8edc5c85605b130

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\plmdebug.exe · signed by Microsoft Windows Kits Publisher

84b9ba7f61846146a4e0abc9816a61cd9a36e8ee389a88c595266e0010c93866

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.