CmdID

CmdID / Files

CPrepSrv.exe

Cluster Server Side Agent file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real CPrepSrv.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCluster Server Side Agent

1 known copy

10.0 (WinBuild.160101.0800) · C:\Windows\system32\CPrepSrv.exe · signed by Microsoft Windows

e23c6019c1f67eea8964f725831a49b7968f11b2e925c62459a64a0a5b4574bd

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.