CmdID

CmdID / Files

MRINFO.EXE

Multicast Information file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MRINFO.EXE?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMulticast Information

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MRINFO.EXE · signed by Microsoft Windows

4214609049b89f27930a8b9bcf40b7565c99f012c52ae0b8fe1e8c9181f2eaca

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\MRINFO.EXE · signed by Microsoft Windows

fd6cde67e70d511a1f1a1c3a2f469022ea498f989609831d90c0aa15427bc0ac

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MRINFO.EXE · signed by Microsoft Windows

4e02cb071b535096151deb19675b5544d4da97584e782bf6993e9fd1e9b2007d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\MRINFO.EXE · signed by Microsoft Windows

59eea6e8904771a620559ec4f55aed2ca0f5bcf9b14c6d030301f165aa59eb2c

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MRINFO.EXE · signed by Microsoft Windows

0ffdf7e27d669f4f944298c327b01403fb1c38c6ab1356e1841125af91b69ab0

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\MRINFO.EXE · signed by Microsoft Windows

4e1acfd068136c1bfcc4f1d8d86bae4f02524b4c5ba1279807ad1ae0b6924dc6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\MRINFO.EXE · signed by Microsoft Windows

20bb1370f14ad18c0ad78bd2c16fae467ca9912f31ee77352c87bc5cbad38206

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MRINFO.EXE · signed by Microsoft Windows

7442c2ad1eb752832fb6d4f6ad0e66c8163a055d27ccf894f65adb8441d4f2d2

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\MRINFO.EXE · signed by Microsoft Windows

a4a9459da5e4b7bacdd60bcfd92195f5ce33fec20a8b6bf0825406846ff52996

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\MRINFO.EXE · signed by Microsoft Windows

fc150516ec51b4aaa09a85057ecd7645d3ba3a3e34e6863862ba463146383bc9

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\MRINFO.EXE · not signed

a7a6b7996e5338ed3b138110883758e74d03d673798510d2019e82c932062b8c

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\MRINFO.EXE · not signed

f1ec554addbf504323b861b5503a660038fe458884cb66d1ced568780070dc94

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.