CmdID

CmdID / Files

mtstocom.exe

COM+ file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real mtstocom.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionCOM+

12 known copies

2001.12.10941.16384 (rs1_release.160715-1616) · C:\Windows\SysWOW64\mtstocom.exe · signed by Microsoft Windows

ac1be3b3c09c1ff4ccb1102ae8656539d88a7cfe394902d8ad67cfbbb2a8adc4

2001.12.10941.16384 (rs1_release.160715-1616) · C:\Windows\system32\mtstocom.exe · signed by Microsoft Windows

ac8f0a06cbb79a3daa27c9cbf0b3fae62f4cb887d1f59ed673b32cdb80eb8d32

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\system32\mtstocom.exe · signed by Microsoft Windows

0d65902b90831bb34f7d56133710389f130d644c296bb604188c4db5c97e76b0

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\system32\mtstocom.exe · signed by Microsoft Windows

1796c359ff95a9ff8b04d6758c19b3b07a7fcf11a0ab2f93b4f0b2befdc6607d

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\mtstocom.exe · signed by Microsoft Windows

278cc4a906e640cf944e970d7dfeea4a4edd1f2e19c77229021fbc39925323f1

2001.12.10941.16384 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\mtstocom.exe · signed by Microsoft Windows

5104d3e333c974ee244cca4f42ff646ca728755267f6b38a4e7568475c08dac5

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\system32\mtstocom.exe · signed by Microsoft Windows

66479fca0dc380ecbd62bc55a75c2ab5b33fbf3d2119c47748fbf3a3dd3a0954

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\system32\mtstocom.exe · signed by Microsoft Windows

6e620945bed6dbafcf7893aa243f156800cdb62ff0ec4068a5f12b5d9baf3356

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\SysWOW64\mtstocom.exe · signed by Microsoft Windows

9db938cb9989a1882dbc0f344e510e76bafc4358b2aadb5dbb66a11d763a7ae6

2001.12.10941.16384 (WinBuild.160101.0800) · C:\Windows\SysWOW64\mtstocom.exe · signed by Microsoft Windows

a278eab3c60f800fe4155a69147fa6f491b3dc021b83599a035b9c77d29096b5

2001.12.10530.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\mtstocom.exe · not signed

2671795bc7c78a0cf195423640d8cd650d0d7b73a43352a6566389957ae82863

2001.12.10530.16384 (winblue_rtm.130821-1623) · C:\windows\system32\mtstocom.exe · not signed

66718965b96c4de75167c8b4c8b682be6339ab01aea9889c630add380c7569bc

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.