CmdID

CmdID / Files

WaaSMedicAgent.exe

WaasMedic Agent Exe file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real WaaSMedicAgent.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWaasMedic Agent Exe

7 known copies

10.0.22000.132 (WinBuild.160101.0800) · C:\WINDOWS\system32\WaaSMedicAgent.exe · signed by Microsoft Windows

8ad048da59e20848e7f1dfa95ece91999dc01998976ee1b541d5d11c176e9825

10.0.19041.662 (WinBuild.160101.0800) · C:\Windows\system32\WaaSMedicAgent.exe · signed by Microsoft Windows

6e43fd39c25b6b216e8acf72f8ef420b811506dfaf0e6f23e21f4708be36f048

10.0.19041.450 (WinBuild.160101.0800) · C:\Windows\system32\WaaSMedicAgent.exe · signed by Microsoft Windows

85fb7cf779af202942d7f7e23aa9913484a9252482daa6e87ab15218ce407147

10.0.19041.207 (WinBuild.160101.0800) · C:\Windows\system32\WaaSMedicAgent.exe · signed by Microsoft Windows

4aa293da5a84db5ee36cd6f5a6f8df2fd740afaf82a62f307422465be7105809

10.0.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\WaaSMedicAgent.exe · signed by Microsoft Windows

5e1f67022e511362c7975943687228488cab7c1cd7b615267f584c3467b39167

10.0.18362.778 (WinBuild.160101.0800) · C:\WINDOWS\system32\WaaSMedicAgent.exe · signed by Microsoft Windows

d7787fb4c690f5938ea5c932c22aa08200f026038b392223846523a241a91c31

10.0.17763.802 (WinBuild.160101.0800) · C:\Windows\system32\WaaSMedicAgent.exe · signed by Microsoft Windows

c25ab34d03892ca1d96562bac72c2a49bce5cb1468c104aa59cf8603a7037d25

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.