CmdID

CmdID / Files

CExecSvc.exe

Container Execution Agent file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real CExecSvc.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionContainer Execution Agent

3 known copies

10.0.19041.867 (WinBuild.160101.0800) · C:\Windows\system32\CExecSvc.exe · signed by Microsoft Windows

629d356b5b690bc7baeeff0d2793db3ba3fa4d200e55e9d8283e2ab55272894a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CExecSvc.exe · signed by Microsoft Windows

666992bc336c0bda92a7731c77f04b28e7eb22c72421676f32aa13b443372fc3

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\CExecSvc.exe · signed by Microsoft Windows

be40260c6fb4245b913e83b3ab2238d87841d9fef4caff92155bb79e011bc205

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.