CmdID

CmdID / Files

UpdateMonitor.exe

paint.net Update Monitor file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real UpdateMonitor.exe?

file version info and known copies
Installed inC:\Program Files\paint.net\
Signed byDOTPDN LLC
Productpaint.net, dotPDN LLC
Descriptionpaint.net Update Monitor

1 known copy

4.213.7521.38873 · C:\Program Files\paint.net\UpdateMonitor.exe · signed by DOTPDN LLC

812e12f3467bf6f6fb43039c359b37ff5d75805ccb2abafd8cd13c061257d947

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.