CmdID

CmdID / Files

agentactivationruntimestarter.exe

Program on Windows 9 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real agentactivationruntimestarter.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows

9 known copies

Version not recorded · C:\Windows\SysWOW64\agentactivationruntimestarter.exe · signed by Microsoft Windows

012f3e214d405d03aefa0d407fdaab35b53a7a8e549ae5aa85e3bfd355af65f1

Version not recorded · C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe · signed by Microsoft Windows

3a9fe4ecc5424f0d989b36155c1b2a7f4546a59c460fed0fe72333d1a4f8a1cc

Version not recorded · C:\WINDOWS\system32\agentactivationruntimestarter.exe · signed by Microsoft Windows

57f35138d8a081a5094207273077cf9e4783755c959844113d4a9b7d21f7e1ce

Version not recorded · C:\WINDOWS\system32\agentactivationruntimestarter.exe · signed by Microsoft Windows

62ba3eeb6fd73998f4b478a15da4a41bbfc3696a55233627595f95473aae7a6d

Version not recorded · C:\Windows\system32\agentactivationruntimestarter.exe · signed by Microsoft Windows

682c197ae9f493827b8e53fcd0c8a54f2ad504fc2e8aa466fd4e268139cebf40

Version not recorded · C:\Windows\SysWOW64\agentactivationruntimestarter.exe · signed by Microsoft Windows

88effca42907259b29dce23af9683e07973b0bc22463488dd5d149715291c944

Version not recorded · C:\Windows\system32\agentactivationruntimestarter.exe · signed by Microsoft Windows

bf515aa1bb9865424fa665d4e781980135cb44422a84e8c63ed18b000e7541b8

Version not recorded · C:\Windows\system32\agentactivationruntimestarter.exe · signed by Microsoft Windows

ce2903ac725f5dce0e2f658996132858faaf14f2eef18b28cdba9ca807a21f77

Version not recorded · C:\Windows\system32\agentactivationruntimestarter.exe · signed by Microsoft Windows

de238c935519f2bccdeb8dbff975cde9f8b7a7fa64b81608736fc764ff210547

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.