CmdID

CmdID / Files

Locator.exe

Rpc Locator file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Locator.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionRpc Locator

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Locator.exe · signed by Microsoft Windows

cc4d3b788b293d812dabf8a90f57b7e9ec332e5ab2b7e15057c7fc61da5abefc

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Locator.exe · signed by Microsoft Windows

e13985d667f66b7a0082356f23270f61a57b8c2dd211b1e09d66d7970d7b4d6a

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\Locator.exe · signed by Microsoft Windows

cdfaa0429d8ef28e7011cfeb00c8cb08f63a4af53a1fa6d41d23f86d85d80ca5

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\Locator.exe · signed by Microsoft Windows

8b5743d4acf8c571f039f83464672306d9f899e4c8512fab9538807c43df4a67

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\Locator.exe · signed by Microsoft Windows

347d8e7c50ec7f96217c7421d9bc8a42c9df50b94169cb58dcf857a63c33c2ea

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\Locator.exe · not signed

3b5706b0cf0969a9f82060fd4dcc745f2d83c066b663fe8a4f0f493b64032c9c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.