CmdID

CmdID / Files

CredentialEnrollmentManager.exe

Credential Enrollment Manager file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real CredentialEnrollmentManager.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCredential Enrollment Manager

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\CredentialEnrollmentManager.exe · signed by Microsoft Windows

5e0f43fdab4dda329b6ca0f116119a1b681c7a9ef1cc3d5d3c0f6649d4f11b0e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CredentialEnrollmentManager.exe · signed by Microsoft Windows

2063a8145d63798b948ecf755d2592b4751d8386b2b47b3d13d42b5d95557dcf

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CredentialEnrollmentManager.exe · signed by Microsoft Windows

2266be2b8d50de5d366e2404f604f7a63a50233eb5425727106ecb3c14528afd

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CredentialEnrollmentManager.exe · signed by Microsoft Windows

d1360612ecf7169105929115e160c2bd248300a7d2b6a21e7e93301df4939ef9

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CredentialEnrollmentManager.exe · signed by Microsoft Windows

f3896f6f5f51061ac47687af886d3e8170cef75d221fa2e4fac2368df51990de

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\CredentialEnrollmentManager.exe · signed by Microsoft Windows

70235889ca8565ed4045d7eb5337ea960a9ad3fb7cca8e7addfccc301bc0150e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.