CmdID

CmdID / Files

timeout.exe

timeout - pauses command processing file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real timeout.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
Descriptiontimeout - pauses command processing

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\timeout.exe · signed by Microsoft Windows

0ede7a9ea4ab00c558364d7fff59833fe9f3dbd805a23578a75b5fd5a6a06b05

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\timeout.exe · signed by Microsoft Windows

5ea703792379b1e833739ad64f1982b94c1d3b3397009f7e410d5f5f8577bb72

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\timeout.exe · signed by Microsoft Windows

c8c350fab1130644536db6a84f605791367308b995079ad494d46a8c617c21d6

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\timeout.exe · signed by Microsoft Windows

dab1647e4a1f207835162d87192a173519b1bc1fc274f2e17421702fffa578e7

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\timeout.exe · signed by Microsoft Windows

d8b40a1b7cc0c5be23c7df31f6116c1e6829e2f1561813103c3d271a1766cfdb

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\timeout.exe · signed by Microsoft Windows

ee3fb5e7fb6e9e8ba3039ff134bfacb760a2b238a87d67e8c3aa68d38a30a46f

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\timeout.exe · signed by Microsoft Windows

496b42aaa7aaf0665e5edd52d4348ec4105fb758db674b110fa252df247c91dc

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\timeout.exe · signed by Microsoft Windows

9de395721eee865d97f27734b0eaa3d204384eee005fc247be026c24d277aa1c

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\timeout.exe · signed by Microsoft Windows

a7b4acfb3a3efdd83af8664f404d937ffd440564cb43a872dae0ac21d99afbd8

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\timeout.exe · signed by Microsoft Windows

f9b3348029b76bbb658a097bf361ea72cefa0d15ce444e9e8a689b35b67a78e7

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\timeout.exe · not signed

b9ec92a5beaa11a7c17f84ecd346b138c39a76244926c310202ddbb24c3700b2

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\timeout.exe · not signed

cad2ab101c037d8f45073f61f927dc8750a937b9d5b878453fdf48a6c04660db

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.