» cmdagent.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

cmdagent.exe

COMODO Internet Security

Comodo CA Limited

It runs as a windows Service named “COMODO Internet Security Helper Service”. This is installed with COMODO Firewall Pro.

File name:

cmdagent.exe

Publisher:

COMODO (signed by Comodo CA Limited)

Product:

COMODO Internet Security

Version:

3, 8, 64263, 468

MD5:

c3b46cfe64fe6ebe5b996988822a460c

SHA-1:

97f3f8e8037c1771f3edec6a0cdb864c07672241

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/24/2024 3:38:33 PM UTC (today)

File size:

683.7 KB (700,152 bytes)

Product version:

3, 8, 64263, 468

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\comodo\comodo internet security\cmdagent.exe

Digital Signature

Signed by:

Comodo CA Limited

Authority:

The USERTRUST Network

Valid from:

5/14/2007 3:00:00 AM

Valid to:

5/14/2010 2:59:59 AM

Subject:

CN=Comodo CA Limited, O=Comodo CA Limited, STREET="3rd Floor, 26 Office Village", STREET=Exchange Quay, STREET=Trafford Road, L=Salford, S=Greater Manchester, PostalCode=M5 3EQ, C=GB

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00863A68583ED1EF52040D77BDDDCED365

File PE Metadata

Compilation timestamp:

2/11/2009 11:56:00 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

6144:+bqDqJ0we4QxEFoJ+Lri4rzS8twu1GfTUDUcukZj7nPKpODk0zIG5RTHvg:+WDqJ0we4FRi4a84yPrDkKIGTI

Entry address:

0x39117

Entry point:

E8, 11, 94, 00, 00, E9, 16, FE, FF, FF, 83, 7C, 24, 08, 00, 74, 0A, 66, C7, 01, 2D, 00, 83, C1, 02, F7, D8, 56, 8B, F1, 33, D2, F7, 74, 24, 08, 83, FA, 09, 76, 05, 83, C2, 57, EB, 03, 83, C2, 30, 66, 89, 11, 41, 41, 85, C0, 77, E4, 66, 83, 21, 00, 49, 49, 66, 8B, 16, 0F, B7, 01, 66, 89, 11, 49, 66, 89, 06, 49, 46, 46, 3B, F1, 72, EC, 5E, C2, 08, 00, 55, 8B, EC, 83, 7D, 10, 0A, 8B, 45, 08, 75, 0A, 85, C0, 7D, 06, 6A, 01, 6A, 0A, EB, 05, 6A, 00, FF, 75, 10, 8B, 4D, 0C, E8, 8F, FF, FF, FF, 8B, 45, 0C, 5D, C3... 
[+]

Entropy:

4.7510

Code size:

336 KB (344,064 bytes)

Service

Display name:

COMODO Internet Security Helper Service

Service name:

cmdAgent

Type:

Win32OwnProcess, InteractiveProcess

Group:

COM Infrastructure

Depends on:

RpcSs

The file cmdagent.exe has been discovered within the following program.

COMODO Firewall Pro by COMODO

Publisher's description - “This ground-breaking method of protecting your PC means that only trusted applications are allowed to run. Malware and untrusted files get nowhere near anything important AND you get to use your computer without interruption from nagging alerts.”

www.comodo.com

7% remove it

Scan cmdagent.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.