CmdID

CmdID / Files

MDMAgent.exe

MDMAgent file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MDMAgent.exe?

file version info and known copies
Original nameMDMAgent in the file’s header: a renamed copy still carries it
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMDMAgent

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MDMAgent.exe · signed by Microsoft Windows

0d39a449ec35b867fcae71a672ef34c1f6ca6f895b8747d997029008ae2a86ac

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\MDMAgent.exe · signed by Microsoft Windows

9840565e700311386876d2843b33e9a680f3d64ac821674b259573e441198e13

10.0.19041.1266 (WinBuild.160101.0800) · C:\Windows\system32\MDMAgent.exe · signed by Microsoft Windows

b306751ff28946b8f7932f1bff7de9b3ffb5233ca789d7d1bb582ecd556dbb70

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\MDMAgent.exe · signed by Microsoft Windows

1170cd2d64e39fc656c90af64fec8f1734be39ae7db1d0a3be554379e8321154

10.0.18362.815 (WinBuild.160101.0800) · C:\WINDOWS\system32\MDMAgent.exe · signed by Microsoft Windows

742a75ee20756996ba7bae1fe2506106794a686557e4147a742e6de5210e8e07

10.0.17763.592 (WinBuild.160101.0800) · C:\Windows\system32\MDMAgent.exe · signed by Microsoft Windows

489e36752e19e566410aea869888033aa630d8bc433dddf842dc4bed1ca18cc0

10.0.14393.1794 (rs1_release.171008-1615) · C:\Windows\system32\MDMAgent.exe · signed by Microsoft Windows

5808752d94bf981798dabae8b46dfd2a849b7a889724921a505fee5fe7fd97dd

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.