CmdID

CmdID / Files

AgentService.exe

AgentService EXE file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real AgentService.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAgentService EXE

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\AgentService.exe · signed by Microsoft Windows

395564dce668e21d767e2a9a627569b97bc06a63fdedc328101e65d05327316d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AgentService.exe · signed by Microsoft Windows

04784cbb65e3810a3246801dcd8abaa40d02fc0f2c1f967a203df3dfc6298767

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AgentService.exe · signed by Microsoft Windows

0b22ac38a6b10382df490796c914881329fa80092243a58a9e90d0cce27a5531

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AgentService.exe · signed by Microsoft Windows

308f7f09cd5d71f29e800f969de053ecb134544cae1393098b9a7126ee0bc5a9

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\AgentService.exe · signed by Microsoft Windows

ebb1ce157d405f9c681b0013c96997f1659c55040c96638c5c525a3c412df377

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\AgentService.exe · signed by Microsoft Windows

31826fcec35683b43170876f0b26b306277b1669f62259d5fe3cd5c10bc05d11

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\AgentService.exe · signed by Microsoft Windows

bf7b512f54ae828774094eca9aa39d50fd5ff9511ca1d140102995c8ec468b11

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.