CmdID

CmdID / Files

mcbuilder.exe

Resource cache builder tool file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real mcbuilder.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionResource cache builder tool

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\mcbuilder.exe · signed by Microsoft Windows

19980e0523fc83643d11c694203cc278c2cf059ebbbc10c160a0fff440a61c28

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\mcbuilder.exe · signed by Microsoft Windows

c603efd212f9d676c089de05df0ecdb52becfaff685d1d4dc528d88a7f08a0b5

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\mcbuilder.exe · signed by Microsoft Windows

b139d09d95e5a1de02a00324054fd3db7d7e874e881c2420441f2576496f8695

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\mcbuilder.exe · signed by Microsoft Windows

f5fbd701e0ceefcab76839231c23f29eb967ad6107520b8454c40fd8dcddfde1

10.0.18362.387 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\mcbuilder.exe · signed by Microsoft Windows

bdc7199e8fb51e5f32ab6014a27d3aad3f18f770753e0c352971228ef9ebc6a5

10.0.18362.387 (WinBuild.160101.0800) · C:\WINDOWS\system32\mcbuilder.exe · signed by Microsoft Windows

f98c4339da9c0d4ba628fcb9ec02d9407fda4cb22f8c1f0ec2b9a33bdee6ba4b

10.0.17763.719 (WinBuild.160101.0800) · C:\Windows\system32\mcbuilder.exe · signed by Microsoft Windows

41bbd3b038263161d5098891c98f0693af4b7ae42a150e2b644012087d2414f7

10.0.17763.719 (WinBuild.160101.0800) · C:\Windows\SysWOW64\mcbuilder.exe · signed by Microsoft Windows

6c608704aad806f7e3d6e821e2745ea82530e756215f8ba39662245d57a04a47

10.0.14393.3659 (rs1_release_1.200410-1813) · C:\Windows\SysWOW64\mcbuilder.exe · signed by Microsoft Windows

0f7adbf96ee089af466372425e7fa9fb39ebf79274a5acf43d0d21443b05fcb3

10.0.14393.3659 (rs1_release_1.200410-1813) · C:\Windows\system32\mcbuilder.exe · signed by Microsoft Windows

a6ac534e69e316145cb54b31d0d9de4adddd471d790fb031c85d3f3ef61aaa8f

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\SysWOW64\mcbuilder.exe · not signed

7ca1e150017ac7d1408c155ec01eab78eb8019789e26bf78b129ab4b39a4faed

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\mcbuilder.exe · not signed

f63cc642334a7b7579a81d351699065efa52163cf74b7707c1db8dc6be0ebdce

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.