CmdID

CmdID / Files

VS_PostClean_wdexpress.exe

Microsoft Visual Studio 2015 Post-Clean Tool WDExpress file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real VS_PostClean_wdexpress.exe?

file version info and known copies
Original nameVS_PostClean.exe in the file’s header: a renamed copy still carries it
Installed inC:\ProgramData\Package Cache\98AD44F9BA70266A0668781FA842DB14512F984D\packages\VS_Clean\
Signed byMicrosoft Corporation
ProductMicrosoft Visual Studio 2015 Post-Clean Tool, Microsoft Corporation
DescriptionMicrosoft Visual Studio 2015 Post-Clean Tool WDExpress

1 known copy

14.0.23107.0 built by: D14REL · C:\ProgramData\Package Cache\98AD44F9BA70266A0668781FA842DB14512F984D\packages\VS_Clean\VS_PostClean_wdexpress.exe · signed by Microsoft Corporation

d6a6b1e26245cb999eabe37388a5b2c20d075d426cabec09d2d3c5a0e2224ce9

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.