CmdID

CmdID / Files

diskusage.exe

diskusage.exe file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real diskusage.exe?

file version info and known copies
Installed inC:\WINDOWS\system32\
C:\WINDOWS\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
Descriptiondiskusage.exe

2 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\diskusage.exe · signed by Microsoft Windows

4873cdff70ae7deba286d566fe7c54be67d1c5f83b7b99c80a0dcfb33099f2f4

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\diskusage.exe · signed by Microsoft Windows

739e3c802af9899871c51fde6c4db36ef99447acf4740c4efbf30580508bd2a3

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.