CmdID

CmdID / Files

rrinstaller.exe

R&R installer file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real rrinstaller.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft DRM, Microsoft Corporation
DescriptionR&R installer

12 known copies

11.0.22000.1 · C:\WINDOWS\system32\rrinstaller.exe · signed by Microsoft Windows

3b3efa3beed81a4d0d9cdbd45b2c6755125a43b7dea3e3264aa01d6f0c710ddd

11.0.22000.1 · C:\WINDOWS\SysWOW64\rrinstaller.exe · signed by Microsoft Windows

fa9c8f9d2ff7ceb03c391c260418e6100a40acb090a1f0d24cad7a61ba97ba3c

11.0.19041.746 · C:\Windows\system32\rrinstaller.exe · signed by Microsoft Windows

9446b8ec0d67684ee687def53da4ddc88cfd935000c2593afdf2ad725f46a0f0

11.0.19041.746 · C:\Windows\SysWOW64\rrinstaller.exe · signed by Microsoft Windows

b655b4f7f804fe6711208eb0513d553fa87a4691ca8b37980ba33e8dd3551358

11.0.19041.1 · C:\Windows\system32\rrinstaller.exe · signed by Microsoft Windows

4ff9a380f55c6b3bb4aa67e6c757b5dccc5af9f5c4a433a255d7a6f83c8dcada

11.0.19041.1 · C:\Windows\SysWOW64\rrinstaller.exe · signed by Microsoft Windows

e580885a1dc294bf9c7653abd08ab8de490d63f8e30ab73bbf031a3ce8a57128

11.0.18362.1 · C:\WINDOWS\system32\rrinstaller.exe · signed by Microsoft Windows

8cc413b7284018573b26f874412d442af5ac4eed582ceac4b67ae1a10a2cb1aa

11.0.18362.1 · C:\WINDOWS\SysWOW64\rrinstaller.exe · signed by Microsoft Windows

a2218428ba24e01e15bb2e2fdacfb8916a52b7021bfa8a99603da00892a6f029

11.0.17763.1 · C:\Windows\SysWOW64\rrinstaller.exe · signed by Microsoft Windows

837115f05f375b2506c57fc917c21905b46679126035113d38a60dce9b5b675f

11.0.17763.1 · C:\Windows\system32\rrinstaller.exe · signed by Microsoft Windows

ac5814df94802962346a77c6d5acd315f499c4c8ac2e2578875663ec88382b08

11.0.14393.0 · C:\Windows\SysWOW64\rrinstaller.exe · signed by Microsoft Windows

cd8683dd938782507727c978fc3b39c95164fd9fd1e2b795c4895f56ca5fabcf

11.0.14393.0 · C:\Windows\system32\rrinstaller.exe · signed by Microsoft Windows

eb41ae9bfd2cbc99411ba4b6732e36da7581cfe1176c6e1aa2b8c1f4f4287250

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.