CmdID

CmdID / Files

midl.exe

Microsoft IDL Compiler Driver file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real midl.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft IDL Compiler Driver

3 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\midl.exe · signed by Microsoft Corporation

32589a45054267e6d53cabfbde27a0c50110eecd0b34e209857607b3e65dff07

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\midl.exe · signed by Microsoft Corporation

601d72f3791343038c51ec45587984d85c811de9929a2ab3d05483ad54aeb443

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\midl.exe · signed by Microsoft Windows Kits Publisher

ae95b66821db89b69af9266824796e3ef70f7bb60f06e8025fa4ae26812f1b12

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.