CmdID

CmdID / Files

SppExtComObj.Exe

KMS Connection Broker file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SppExtComObj.Exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionKMS Connection Broker

12 known copies

10.0.22000.282 (WinBuild.160101.0800) · C:\WINDOWS\system32\SppExtComObj.Exe · signed by Microsoft Windows

ef1cbf6ff3cde450e40dac0da5d285e6458cb850623a8e877ac052146d01715c

10.0.19041.685 (WinBuild.160101.0800) · C:\Windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

e6ac49bddbe734097f86e55d1250a29de1196b0c7a260bc36dc171d33ffbed0d

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

0edd19c320b603e2df71cf6ce90844dc3abdf4cddc4b6daae1675704c8b84dec

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

ca340c177a6ff1049fc765ad5487d34b4430793b414d6244dd838ead9317cd04

10.0.19041.329 (WinBuild.160101.0800) · C:\Windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

4c31a9d01899db1077cdaac0561bc23c2d9442238aa1e9b12882747311fcbbf6

10.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

2a6581576305771044f07ea0fef27f77859996dbf66c2017e938f90bfc1e010c

10.0.18362.719 (WinBuild.160101.0800) · C:\WINDOWS\system32\SppExtComObj.Exe · signed by Microsoft Windows

084958cea9ccfb412d346fb7493a382bcb1511bdbe7abfe66c9e1d984e5c45fa

10.0.17763.1432 (WinBuild.160101.0800) · C:\Windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

144c86f05d93ea0d95998c17b07bff39b79cc82a46f9a3b378f454ec00f903d6

10.0.17763.1294 (WinBuild.160101.0800) · C:\Windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

9907bd2cc2e6933ab877fd693005344632f5f07c45b8ad33477585e754cd809b

10.0.17763.1282 (WinBuild.160101.0800) · C:\windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

bf2c1ace3fb72e9d8404e8360a50d7938b7625fa095a5b107f483d5df89da942

10.0.14393.2248 (rs1_release.180427-1804) · C:\Windows\system32\SppExtComObj.Exe · signed by Microsoft Windows

a0fdd9f6a04ea80177660b2d7d22cbcabb507744f8cc43dd16bb6d10f2432f3b

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\SppExtComObj.Exe · not signed

5d7aec13aba1c1e2cfb788dfddb3b31ce4ff879c7745c0728dcb8530251ffdbb

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.