CmdID

CmdID / Files

AddInProcess32.exe

AddInProcess.exe file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real AddInProcess32.exe?

file version info and known copies
Installed inC:\Windows\Microsoft.NET\Framework\v4.0.30319\
Signed byMicrosoft Windows
ProductMicrosoft .NET Framework, Microsoft Corporation
DescriptionAddInProcess.exe

2 known copies

4.8.4161.0 built by: NET48REL1 · C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe · signed by Microsoft Windows

4193d9ec5fd54c80ccb9bfcc990a7bb6862a78dd196d6dcf9345283d7c40fb24

4.8.4084.0 built by: NET48REL1 · C:\Windows\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe · signed by Microsoft Windows

c1cf3dc8fa1c7fc00f88e07ad539979b3706ca8d69223cffd1d58bc8f521f63a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.