CmdID

CmdID / Files

InetMgr6.exe

IIS Admin Program file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real InetMgr6.exe?

file version info and known copies
Installed inC:\Windows\system32\inetsrv\
C:\Windows\SysWOW64\inetsrv\
Signed byMicrosoft Windows
ProductInternet Information Services, Microsoft Corporation
DescriptionIIS Admin Program

4 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\inetsrv\InetMgr6.exe · signed by Microsoft Windows

570df20721aa531e85d12be748dff9a03390cddc1a2e0b4080f56cfb7aacb756

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\inetsrv\InetMgr6.exe · signed by Microsoft Windows

74e5de2b1c6014a578cc516edf9995b05b7d8da7cc6df6db027f6f4a0a9db5d6

8.5.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\inetsrv\InetMgr6.exe · not signed

5565a40bbb13eb123c2b6320ec405e24de91c81f2820a1e0650d6ba00fea546e

8.5.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\inetsrv\InetMgr6.exe · not signed

ac173e71ffd0cb0b6e1a25c67d35098291b0abe6037843497796f3e0312b59f3

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.