CmdID

CmdID / Files

CasPol.exe

Microsoft .NET Framework CAS Policy Manager file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real CasPol.exe?

file version info and known copies
Installed inC:\Windows\Microsoft.NET\Framework64\v4.0.30319\
C:\Windows\Microsoft.NET\Framework\v4.0.30319\
Signed byMicrosoft Windows
ProductMicrosoft .NET Framework, Microsoft Corporation
DescriptionMicrosoft .NET Framework CAS Policy Manager

4 known copies

4.8.4161.0 built by: NET48REL1 · C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\CasPol.exe · signed by Microsoft Windows

73f79e5fe7d26c6bf75fbeec6c68d422ca94ba7f620ab7d0db4b28ca1c8cefda

4.8.4161.0 built by: NET48REL1 · C:\WINDOWS\Microsoft.NET\Framework64\v4.0.30319\CasPol.exe · signed by Microsoft Windows

aa16f367eed454536fc128b6bc42b2c7b1300c3b59d1682489fd74cabe31f53e

4.8.4084.0 built by: NET48REL1 · C:\Windows\Microsoft.NET\Framework64\v4.0.30319\CasPol.exe · signed by Microsoft Windows

123ce330093975473f3266e08ffd3e993d9dba8e60b554f85dc5ad5d17ee537d

4.8.4084.0 built by: NET48REL1 · C:\Windows\Microsoft.NET\Framework\v4.0.30319\CasPol.exe · signed by Microsoft Windows

7d3bdb5b7ee9685c7c18c0c3272da2a593f6c5c326f1ea67f22aae27c57ba1e6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.