CmdID

CmdID / Files

redirusr.exe

Microsoft User Container Redirection Utility file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real redirusr.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft User Container Redirection Utility

2 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\redirusr.exe · signed by Microsoft Windows

8c3a39bb2e20fd149ef7cccec9b0371cda343e0910cfed7f8a9438753ca7a783

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\redirusr.exe · signed by Microsoft Windows

a5a5a69d5013daeb467ac6f98724c28b37a5c1426bd2c6195b92beee6ed5d491

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.