CmdID

CmdID / Files

aspnetca.exe

ASP.NET setup custom actions file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real aspnetca.exe?

file version info and known copies
Installed inC:\Windows\system32\inetsrv\
C:\Windows\SysWOW64\inetsrv\
Signed byMicrosoft Windows
ProductInternet Information Services, Microsoft Corporation
DescriptionASP.NET setup custom actions

6 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\inetsrv\aspnetca.exe · signed by Microsoft Windows

0dd54b36386cd9473bbb277c2a47f17d0f09e796f86303419a8224f84968b6d8

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\inetsrv\aspnetca.exe · signed by Microsoft Windows

dec16dbeb39a9f50c7682832bb9a1a1a64d8f2f27e7292764e430502b557a85f

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\inetsrv\aspnetca.exe · signed by Microsoft Windows

168a8b4f560cee8f1bbe0c5340dc197f369ac1524de17ee3eae9a054ef814b7c

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\inetsrv\aspnetca.exe · signed by Microsoft Windows

cd4b5a756339a1450d0da92064256f977b379be13c6065d6a58c2b9729f20f50

8.5.9600.17415 (winblue_r4.141028-1500) · C:\windows\SysWOW64\inetsrv\aspnetca.exe · not signed

3d821bafa1c5097fbcf652a79baca75a87d7ba6843fba06c7e7ebcf46d570095

8.5.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\inetsrv\aspnetca.exe · not signed

8746be1fbe7d5c0fadf0999a06cd5e79e50c342504959e03df0334448211ac95

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.