CmdID

CmdID / Files

MdmDiagnosticsTool.exe

MdmDiagnosticsTool file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MdmDiagnosticsTool.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMdmDiagnosticsTool

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MdmDiagnosticsTool.exe · signed by Microsoft Windows

SHA-256564a21b03503a35e32d452d4be891db6f1916e78d8b41f2adc52253133c31b11SHA-11205605ca528f59b00baf644bfa9891662689a19MD57b730b5dca93c4ffbb312979a7a3071a

10.0.19041.329 (WinBuild.160101.0800) · C:\Windows\system32\MdmDiagnosticsTool.exe · signed by Microsoft Windows

SHA-256aafad4db7aab9e9a140df4e6b0a53dc7067e22c65cad1616e3b79ccc3252ec71SHA-117456b841f099d2cafca796aab5a1a282b72c93eMD5f20ecb94071a09a82e77d6c6ec812ee2

10.0.19041.1023 (WinBuild.160101.0800) · C:\Windows\system32\MdmDiagnosticsTool.exe · signed by Microsoft Windows

SHA-256bb2961e1a7568f390d75654546fd6e7ad6de6a921ef8ac334843e1b3020880edSHA-15431835b05ffd3a13a9f15b3ee937745712731feMD5a2f880f75cd7eb1e9fef1d5d8653c81d

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MdmDiagnosticsTool.exe · signed by Microsoft Windows

SHA-256b4d0392a67b386496e7b513c2c4f66c93c9077e1c27a2c223728152d3373f1c4SHA-15f3e03c0756a3f22fe88a21597429326522d01a6MD509f8366d2e20834d12684e34382e6410

10.0.17763.1282 (WinBuild.160101.0800) · C:\Windows\system32\MdmDiagnosticsTool.exe · signed by Microsoft Windows

SHA-2569b0a7ea1ee9c9bc427dceefc394361d74e7fb7a597a09439c3768cc689301d48SHA-1d500207160d929d9d9d9b73828eb204eb825f7a0MD5ef7505d7277092a7f2703cb8eee9ea8a

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\MdmDiagnosticsTool.exe · signed by Microsoft Windows

SHA-2568cf005fb0da8911c05920f8ab485f92faddf74251e63550f2d02863d8bdf4138SHA-16f6c663c898410015ea2c3977e11b3ea7c824f9fMD5a3ebbf477473af06ee428238aab8ab57

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.