CmdID

CmdID / Files

traceview.exe

TraceView Application file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real traceview.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
DescriptionTraceView Application

3 known copies

V2.1.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\traceview.exe · signed by Microsoft Corporation

38ce6885c30d7b201a4e8e45be90a5553f62b948ceb7d7c44ede004e826c83b9

V2.1.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\traceview.exe · signed by Microsoft Windows Kits Publisher

cd865fecae9f4955c8b52edc6075b843d5fbec320ec0bf83f3418a9a393947e6

V2.1.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\traceview.exe · signed by Microsoft Corporation

e0d595b9b46cdc6166f9493918d78fe7643873e3c97b36ac6d3ec4e609b19db7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.