CmdID

CmdID / Files

comrepl.exe

COM+ Server Replication file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real comrepl.exe?

file version info and known copies
Installed inC:\Windows\system32\Com\
C:\Windows\SysWOW64\Com\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCOM+ Server Replication

12 known copies

2001.12.10941.16384 (rs1_release.160715-1616) · C:\Windows\SysWOW64\Com\comrepl.exe · signed by Microsoft Windows

4fc67d2d80c1ca1ee9e6b81bf093b89a71ab0260972a3c04f5ea461fa1b95850

2001.12.10941.16384 (rs1_release.160715-1616) · C:\Windows\system32\Com\comrepl.exe · signed by Microsoft Windows

8d8f3e2dbaf69c8cfa885a5f822b4d52036552b50c3fe693871a66b4483e8af0

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\Com\comrepl.exe · signed by Microsoft Windows

1794af81e6edbe5a173219c1017a04a078f00484d0cd5986927ef6791a06e6aa

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\system32\Com\comrepl.exe · signed by Microsoft Windows

1a9b9b536a195d25f0b97b741cf4e44c22abef8b0355bf8adc8f5c176b74204e

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\system32\Com\comrepl.exe · signed by Microsoft Windows

24eace63c5db8699d1bf44f8ab5af2448c4f6f400dd702d3521f83fe04a0e19a

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Com\comrepl.exe · signed by Microsoft Windows

289b423e248ccbdf95184c549f8f16cef29706fe9532ee167393ff171a262120

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\Com\comrepl.exe · signed by Microsoft Windows

4b0ce6df61bbb9eb7e4baf4e69a2e0805812142ce012288314b48ef4e5e5d69c

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\system32\Com\comrepl.exe · signed by Microsoft Windows

6c2baefe1eaec5ae7e545cf043ae8f5bed45b9ec1064a2808ff74de1dcbac288

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\system32\com\comrepl.exe · signed by Microsoft Windows

eac4d267fc7eaf129ca81de26590e0c54583b3afd3e4f48eeda255972d70e41e

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\SysWOW64\com\comrepl.exe · signed by Microsoft Windows

f7abcb1234f29423664862b279b57d1d160ae50c749c3fb6dea786e8ec8bc7ce

2001.12.10530.16384 (winblue_rtm.130821-1623) · C:\windows\system32\Com\comrepl.exe · not signed

b7e454b518849e79ef75fd32f8e4db8a39a40e672d37d6573ca04871d4c03696

2001.12.10530.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\Com\comrepl.exe · not signed

bc9cd1e95d6fd6e4428ca2ae85e48a84ff4fe06cd5c5ac3a33eb762fcdb0ab5c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.