CmdID

CmdID / Files

WindowsActionDialog.exe

Windows Action Dialog Broker file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WindowsActionDialog.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Action Dialog Broker

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WindowsActionDialog.exe · signed by Microsoft Windows

6d85485fe6d28159f3b345e3685f3ab160c8a778fbaca1f02a62b89dbd1266f9

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WindowsActionDialog.exe · signed by Microsoft Windows

0c6397bfbcd7b1fcefb6de01a506578e36651725a61078c69708f1f92c41ea31

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WindowsActionDialog.exe · signed by Microsoft Windows

60948718aa23398c24badd7ce9a9fc6f36160dbb578adc593ff465ae878b9782

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\WindowsActionDialog.exe · signed by Microsoft Windows

face2b514ced20add3f8e467dce3769eaaa13398589bc61cf75c7969a641a62d

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\WindowsActionDialog.exe · signed by Microsoft Windows

f27a32776e3fce6c6a5d3a9d46a84a286f71fd8380c5a7065ee34c3ec3d7932f

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\WindowsActionDialog.exe · signed by Microsoft Windows

e00a7184bab1ff6252ccc29a5878d94b148c91b583ba45ce657872f888531f3a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.