CmdID

CmdID / Files

pacjsworker.exe

HTTP Auto Proxy Detection Worker Process file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real pacjsworker.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionHTTP Auto Proxy Detection Worker Process

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\pacjsworker.exe · signed by Microsoft Windows

3e1e1a93c2ea2311f12c28d69b72cdffe790280cd761838abcf8d2a9487a85a0

10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\system32\pacjsworker.exe · signed by Microsoft Windows

b706df579959e10b50990643507d0b4dc241dae5b3db9ef844242ae74d16b4ef

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\pacjsworker.exe · signed by Microsoft Windows

13dc3a66f0237bf832e115f57c3a45653e24df38d786a6811390a30926a1337f

10.0.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\pacjsworker.exe · signed by Microsoft Windows

bf46f21fac085f697c81121eb68af6c49f72388f57514ebbbc1df26ffb303dd7

10.0.18362.778 (WinBuild.160101.0800) · C:\WINDOWS\system32\pacjsworker.exe · signed by Microsoft Windows

090d9bf07054409cf0f38680e09f1f483df328331f3c00383723c53cebe34dc6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\pacjsworker.exe · signed by Microsoft Windows

ff4d515cdcbe9ce053d9cc4d3412f962875098ac87133019eeb12a0f9494bb91

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.