MRINFO.EXE
- File Path:
C:\Windows\SysWOW64\MRINFO.EXE
- Description: Multicast Information
Hashes
| Type |
Hash |
| MD5 |
ECB0A294338EEF33EBC9F036A2B2FD6A |
| SHA1 |
3FB50537FB008A27B92CAACF0C5251BE9E6280A0 |
| SHA256 |
7442C2AD1EB752832FB6D4F6AD0E66C8163A055D27CCF894F65ADB8441D4F2D2 |
| SHA384 |
F7AFB386266DE5BB09FBEECCCE0B92FDA1D86FB4D70B14294C6D9B9D0FC26E46A96AC9F66E6EB62309B28F3EE160215D |
| SHA512 |
E69CDDC46FFF47BFFAD50AD43F1BD5EA55A18B33E0DA4E414F211F0411DF095226B832FBE2D20822BF55D15FBB78F742D5A3FE2864C916FD516594B3F9A5C432 |
| SSDEEP |
384:ZyokBIlWjwAIY39p0pT2pQ/kMfbP3B8WJ8WgUA:ZylBIlc0EHASpykMfLBTa |
| IMP |
190D14EA18A077D297455C1871A8223C |
| PESHA1 |
6C5D7201258C739AA5928A768C8870DF60AEB908 |
| PE256 |
3EC5374C07C0B2B71F32DD4BD71D8AD83EC3AF44FD9F33DC6414449D3809F8C1 |
Runtime Data
Usage (stdout):
Usage: mrinfo [-n?] [-i address] [-t secs] [-r retries] destination
-n Display IP addresses in numeric format
-i address Address of local interface to send query out
-t seconds Timeout in seconds for IGMP queries (default = 3 seconds)
-r retries Number of extra times to send the SNMP queries (default = 0)
-? Print Usage
destination Address or name of destination
Child Processes:
conhost.exe
Open Handles:
| Path |
Type |
| (RW-) C:\Users\user |
File |
| (RW-) C:\Windows |
File |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000004.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000004.db |
Section |
| \BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
Loaded Modules:
| Path |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
| C:\Windows\SysWOW64\MRINFO.EXE |
Signature
- Status: Signature verified.
- Serial:
3300000266BD1580EFA75CD6D3000000000266
- Thumbprint:
A4341B9FD50FB9964283220A36A1EF6F6FAA7840
- Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: mrinfo.exe
- Product Name: Microsoft Windows Operating System
- Company Name: Microsoft Corporation
- File Version: 10.0.17763.1 (WinBuild.160101.0800)
- Product Version: 10.0.17763.1
- Language: English (United States)
- Legal Copyright: Microsoft Corporation. All rights reserved.
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/74
- VirusTotal Link: https://www.virustotal.com/gui/file/7442c2ad1eb752832fb6d4f6ad0e66c8163a055d27ccf894f65adb8441d4f2d2/detection/
MIT License. Copyright (c) 2020-2021 Strontic.