CmdID

CmdID / Files

cmmon32.exe

Microsoft Connection Manager Monitor file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real cmmon32.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft(R) Connection Manager, Microsoft Corporation
DescriptionMicrosoft Connection Manager Monitor

12 known copies

7.2.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\cmmon32.exe · signed by Microsoft Windows

65e03f09ad50d623239a1f6720710ef83bdea597f40e4598514a3e84406c738c

7.2.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\cmmon32.exe · signed by Microsoft Windows

87d1ff9ceefab0a7d25f0c9f10c40cf44e8cb51c1a6a32f94a451462c9ba5608

7.2.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\cmmon32.exe · signed by Microsoft Windows

0032cd8f78472c45c2030441cb3446bad5a632bb149da0ac76f3b6fc2647ba33

7.2.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\cmmon32.exe · signed by Microsoft Windows

542d796db8372c7bd3f9861e0071ffadfab3e9b5cf49a9cdc975c5cb003f3d5f

7.2.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\cmmon32.exe · signed by Microsoft Windows

2580814bcbd32480080f1e038f6557fb944a05210d59e55da58a5a1d473636e1

7.2.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\cmmon32.exe · signed by Microsoft Windows

6afaa69d2bee01d0e40e5a383743f6b58b6fb5b6567d75bade4ae1d1e47975d5

7.2.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\cmmon32.exe · signed by Microsoft Windows

5fe9d729c8d187aaa44fe5396c5e0301a2c8d2d6a2f33e9c9814dae97dd49071

7.2.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\cmmon32.exe · signed by Microsoft Windows

eacbfdf9c84013d21aa0b71ac08edd0d56293c63723cd80fc667127410067a8e

7.2.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\cmmon32.exe · signed by Microsoft Windows

451a24e44fe39e3a772f2341aea32cdfefedd6221e2f7e238057027b397461cd

7.2.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\cmmon32.exe · signed by Microsoft Windows

a95970d4f8de4f869d508acbcf70cbb4a02f06a0f3201f85cf028c5f72b1728a

7.02.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\cmmon32.exe · not signed

044d47369ea6d937443fe1efc821e54055281a33fb7a7398da1279097ca84b6b

7.02.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\cmmon32.exe · not signed

8dd0e96db1eccb739a55bf60e0b4055da712b81b3030c2e7ab93a5bf803d1c3b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.