CmdID

CmdID / Files

iisreset.exe

IIS control command line utility file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real iisreset.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductInternet Information Services, Microsoft Corporation
DescriptionIIS control command line utility

6 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\iisreset.exe · signed by Microsoft Windows

59e7f581688d62d8a52aaf985c5f918d6307ffa9e789fee559c99eaa6eca4fda

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\iisreset.exe · signed by Microsoft Windows

6da6ea7c5d6410d9bc1912d6aa7ac4f094891ccdc2a9a1d29e071e50db72ac06

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\iisreset.exe · signed by Microsoft Windows

9b5363ae9fdc399a71beb6ed13505e351aa7c936b701a606134b5c3bf07fcb56

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\iisreset.exe · signed by Microsoft Windows

eda5883bd414852613ca4c25b4cab15197da73c3dac182f7876a27bac9dcde23

8.5.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\iisreset.exe · not signed

b0f44db47609b1bfb2ad4e515ece27220e46b35f178643104e20f7246d8b42df

8.5.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\iisreset.exe · not signed

ffccf98379c579bc6da94188e51af360402c0fb5d0c6da72a5a12b70517e47ab

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.