CmdID

CmdID / Files

WiLogUtl.exe

Windows Installer Verbose Setup Log Analyzer file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WiLogUtl.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Windows Kits Publisher
ProductWindows Installer, Microsoft Corporation
DescriptionWindows Installer Verbose Setup Log Analyzer

2 known copies

5.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\WiLogUtl.exe · signed by Microsoft Windows Kits Publisher

1c4920bca1754bfacbc4edcac73d247f5fd45877191391d657a60c426eb673f3

5.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\WiLogUtl.exe · signed by Microsoft Corporation

32ac543aaf725a47ed41d1a34da32ea75d35f17279a959224e7eb981d3ca3713

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.