CmdID

CmdID / Files

PackageInspector.exe

PackageInspector allows creation of a catalog containing all executable files laid down by an installer file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real PackageInspector.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPackageInspector allows creation of a catalog containing all executable files laid down by an installer

5 known copies

1.00 (rs1_release.160715-1616) · C:\Windows\system32\PackageInspector.exe · signed by Microsoft Windows

8acba9a79f2d3565dd4056dddafd4d0ab425e6a88a46f03645492fabe4cf6716

1.00 (WinBuild.160101.0800) · C:\WINDOWS\system32\PackageInspector.exe · signed by Microsoft Windows

5c719ee926cb0ba170e840f4047b99f648f6a24f329759d5dfb2ef61200fce49

1.00 (WinBuild.160101.0800) · C:\Windows\system32\PackageInspector.exe · signed by Microsoft Windows

758d9e687dc94a11cee15e4d415fb619c64e854a6d642e42cb83f4838e4e4c4f

1.00 (WinBuild.160101.0800) · C:\Windows\system32\PackageInspector.exe · signed by Microsoft Windows

adf1880a66c7ffab61f60dbb27145a0dccbc7b7726ac750896ff2b7e79a31064

1.00 (WinBuild.160101.0800) · C:\WINDOWS\system32\PackageInspector.exe · signed by Microsoft Windows

f32f1fc2245e6ad6b6a316c8e68aea73eb354c5c8542d45de36162fcd397b0a2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.