makepri.exe
Command line tool for creating PRI files file version info
Program on Windows 3 known copies with hashes
Is it the real makepri.exe?
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\3 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\makepri.exe · signed by Microsoft Corporation
1b2a8914d473c652c8ca0a6c870b25035b6aca5bf44290cfa53374c23f1929b210.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\makepri.exe · signed by Microsoft Windows Kits Publisher
8c394e08e246fd0810be900c4fdd06e5d1f53fafb26c95a61a10ccc96e2afd8510.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\makepri.exe · signed by Microsoft Corporation
d497c9ed1ac550cda0ce18a5c94ad0f70a306b5e579019554eb2b2979495e316From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.