CmdID

CmdID / Files

graphedt.exe

DirectShow SDK Filter Graph Editor file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real graphedt.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
ProductDirectShow, Microsoft Corporation
DescriptionDirectShow SDK Filter Graph Editor

3 known copies

DirectX 10.0 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\graphedt.exe · signed by Microsoft Corporation

24723610623787dc56ce1d12c1645ffe8488dbde62db47e4570790dbe57afd1b

DirectX 10.0 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\graphedt.exe · signed by Microsoft Windows Kits Publisher

684f457e78c61aa41ed915cda89a5453e232e03eba5e986c9ddfc97aabf5172d

DirectX 10.0 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\graphedt.exe · signed by Microsoft Corporation

998682a99aac5d679a736055b50dcde8ded92a0a9c4faee6be276d710567d632

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.