CmdID

CmdID / Files

VmComputeAgent.exe

Hyper-V Guest Compute Service file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real VmComputeAgent.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionHyper-V Guest Compute Service

7 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\VmComputeAgent.exe · signed by Microsoft Windows

5364888ba95d4013da30ef97ebd2df279d31120224d22c89ee03bc80661efd87

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\VmComputeAgent.exe · signed by Microsoft Windows

7bc9885d5ebedf58327f1ce7da39a5ffb1f6f8cfa1321f1ee41b07eccef24387

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\VmComputeAgent.exe · signed by Microsoft Windows

909f82417bfda5a4040bd0a92dab613b1f88af0bc66494975597ede827c18934

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\VmComputeAgent.exe · signed by Microsoft Windows

c900fc9627796f92c3cdcfffa0b6e7781fc8ffd3dac04be32549f34e841c030b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\VmComputeAgent.exe · signed by Microsoft Windows

dc9691009f3cbdee1c5cd8a526a1630d5bffd70aade9e6ed9900a5f3e00a2494

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\VmComputeAgent.exe · signed by Microsoft Windows

ed8805391b9799d1716d0d40c7bf7c45f1ac3181353c46dec88296613305ae3d

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\VmComputeAgent.exe · signed by Microsoft Windows

07999943c8b8394db65105ce68384b1cdb4b361a2ce9ec5f4c796c3f34e65c6a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.