CmdID

CmdID / Files

symchk.exe

Symbol Checker file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real symchk.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\
C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSymbol Checker

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\symchk.exe · signed by Microsoft Windows Kits Publisher

502c1837abfc43f2bcde6c9e3b596d005a91fd557f642d32fc3f4dfe83b5f5cd

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\symchk.exe · signed by Microsoft Windows Kits Publisher

5ce69a3fbe74e8c2a45fbe8beb77d53edaebfd1a2dbb66898310976ae44da698

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\symchk.exe · signed by Microsoft Corporation

d3c551b0d36884346702436aeaf57644767d97b3071d082db3211edca59cffc0

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\symchk.exe · signed by Microsoft Corporation

d5436169513098f45e53e9b67fcd9bce47e6ffd40ef208272c34787bda901f58

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.