CmdID

CmdID / Files

tracelog.exe

Trace control utility file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real tracelog.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionTrace control utility

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\tracelog.exe · signed by Microsoft Windows Kits Publisher

063d45ef6de997fe87d614ecfaaef2e93dd3d856bb5ea07a590ce086776679b1

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\tracelog.exe · signed by Microsoft Windows Kits Publisher

4263cff642430ed63a1f98270a5277f7134ad114bcc582747812ea37d9227fe9

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\tracelog.exe · signed by Microsoft Corporation

5722900ed58968a5a536f04a4bfec375d381810dc5c03e60f68fad73726b3180

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\tracelog.exe · signed by Microsoft Corporation

e74d328c9f8472bb64678e045b1fcdaf8eb42d088fb5bc5d84755de82910c3cf

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.