CmdID

CmdID / Files

MigRegDB.exe

COM+ file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MigRegDB.exe?

file version info and known copies
Installed inC:\Windows\system32\Com\
C:\Windows\SysWOW64\Com\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCOM+

12 known copies

2001.12.10941.16384 (rs1_release.160715-1616) · C:\Windows\SysWOW64\Com\MigRegDB.exe · signed by Microsoft Windows

2a9a0ae521832b1f81d3a1f5607f902bea25370cdfdc7f4dc7e9f8540d3ead95

2001.12.10941.16384 (rs1_release.160715-1616) · C:\Windows\system32\Com\MigRegDB.exe · signed by Microsoft Windows

a31790d0676ad6feefc316a935171c4125def41eeb39bc264222004bc4a1f62c

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\system32\Com\MigRegDB.exe · signed by Microsoft Windows

49719cbaae23626476b11e1ee83f78a20f64655203d512fdbb467efa927c4c6c

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\system32\Com\MigRegDB.exe · signed by Microsoft Windows

6fc3f935f719b2264d640f4fe7953e489f153275e84e3d11ea2c53e7386d47b3

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\system32\Com\MigRegDB.exe · signed by Microsoft Windows

75f6fa1d2bd6cf3d2e3b1389b55ec533efcf1ad9c3ad5c71799621a6e2a7c0c8

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Com\MigRegDB.exe · signed by Microsoft Windows

781e7f15682ffc1d7d523baa7835084199568054ab5161d63ba6a338b270d202

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\Com\MigRegDB.exe · signed by Microsoft Windows

9cb580f63f6814f045928d835e95fa58d8a7fed58feefc3b9481fc4decdb01b1

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\system32\com\MigRegDB.exe · signed by Microsoft Windows

d34c95146d362c3f7b0fe02e940ab2fd30f434c13d05723831a75422c8d19d35

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\SysWOW64\com\MigRegDB.exe · signed by Microsoft Windows

d356b8786f34a59b80a1170fad8e942172073e6c0f9f014da4064e332ae1ace9

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\Com\MigRegDB.exe · signed by Microsoft Windows

fb93897763d9d6042e7b91400d83036b2033634901a07681ed81e5e11bacf302

2001.12.10530.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\Com\MigRegDB.exe · not signed

940c6d3f10b36f3e98b6438b759553edc70992d88ee6f99d2bc7c95677455f13

2001.12.10530.16384 (winblue_rtm.130821-1623) · C:\windows\system32\Com\MigRegDB.exe · not signed

f5ec610bfff58f686b243e3c41d5ecc74f3f8e9ee6543c2174976783cc219568

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.