CmdID

CmdID / Files

hvax64.exe

Hypervisor V2.0 file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real hvax64.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionHypervisor V2.0

12 known copies

10.0.22000.282 (WinBuild.160101.0800) · C:\WINDOWS\system32\hvax64.exe · signed by Microsoft Windows

a0c717e20362448de9bf7cdd44c72f06be16864d3f1affdf6e8ba09e5d6b96d6

10.0.19041.685 (WinBuild.160101.0800) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

3ac77574bba4d7eb76bf44e831bc6a67a2ad4dad29861c8696e8e0d4fca23f50

10.0.19041.610 (WinBuild.160101.0800) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

fbde7cfe00144490ee095f7a28f67c69efe74ff8710cf8c9a8d98ac9eb6b8599

10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

0ce45c5dc6a97720c358ebbaa70f5880471361f5a6274bc9f650010cdc1d6d3e

10.0.19041.450 (WinBuild.160101.0800) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

bfb5476090b98afb058b002bd2c4080fb6dbb2f6b054a54e7ec4eb93cbc3cc42

10.0.19041.329 (WinBuild.160101.0800) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

b9ed710bbfde4f43b8b64b2393fb2627e1a80ca1de700c99df9463867977f593

10.0.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

5736487816d75702711962611c678bcb8daac76fb118c562fa80f86587180e51

10.0.18362.836 (WinBuild.160101.0800) · C:\WINDOWS\system32\hvax64.exe · signed by Microsoft Windows

a5077cdac4b3f10947e2a1f1a81507afaa49e4fead47b9abf41cbded140f2aae

10.0.17763.1518 (WinBuild.160101.0800) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

80aab0cbb6c5428ed4fdc6081ef40cb4f03d796960d770159152366bbf8ad7b7

10.0.17763.1397 (WinBuild.160101.0800) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

d135cef48e9a0a63c8b7277191e70cc52afdeb4bf1c82b2e3c6f78c99b9d1ce8

10.0.17763.1282 (WinBuild.160101.0800) · C:\windows\system32\hvax64.exe · signed by Microsoft Windows

00efc386013536968c1629ba51c8510596feb2c570b21b783d81e73a016f9d4b

10.0.14393.3686 (rs1_release.200504-1524) · C:\Windows\system32\hvax64.exe · signed by Microsoft Windows

7805ec4395f258517dfceeed2b011801fe68c9e2ae9db155c3f9a64dd8a81ff6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.