CmdID

CmdID / Files

mt.exe

mt2.exe file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real mt.exe?

file version info and known copies
Original namemt2.exe in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
Descriptionmt2.exe

3 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\mt.exe · signed by Microsoft Corporation

cf52cb67b516b938de9b968240537f570626ccf3fba6bf82d3a71fa3259cae70

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\mt.exe · signed by Microsoft Windows Kits Publisher

e185b79a3cccb46d1269de7060247e9cac52d2660a8a076033a216cba9a0d820

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\mt.exe · signed by Microsoft Corporation

fb81bea04d38d5585de7ddd8efee7ff402589f9845d634a4b491dc1bdea812af

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.