home

cmdagent.exe

COMODO Internet Security

Comodo Security Solutions, Inc.

It runs as a separate (within the context of its own process) windows Service named “COMODO Internet Security Helper Service”. This is installed with multiple programs including COMODO Antivirus and COMODO Firewall.
Publisher:
COMODO  (signed by Comodo Security Solutions, Inc.)

Product:
COMODO Internet Security

Version:
7, 0, 315459, 4132

MD5:
1c41dcc53a3f02912ea9bc06005fbd53

SHA-1:
4d3dd8745d9778c7004746b200b40a33352f9d89

SHA-256:
c871c4deb74aa46d841c28f21d8c349caa340f1672cb0ceb035ba8b2768e36a0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:46:23 AM UTC  (today)

File size:
6.5 MB (6,812,400 bytes)

Product version:
7, 0, 315459, 4132

Copyright:
2005-2014 COMODO. All rights reserved.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\comodo\comodo internet security\cmdagent.exe

Digital Signature
Signed by:
Comodo Security Solutions, Inc.

Authority:
VeriSign, Inc.

Valid from:
2/18/2013 3:00:00 AM

Valid to:
4/20/2014 2:59:59 AM

Subject:
CN="Comodo Security Solutions, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Comodo Security Solutions, Inc.", L=Clifton, S=New Jersey, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
147A12FD3751E51604AE354C04A6A272

File PE Metadata
Compilation timestamp:
3/25/2014 9:49:33 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
49152:aAiUuKGV7byER6GCh5stOaieFOhGtOVKdVZ7B7rihkASzXjJKaivvXJJpLZ5V2AV:aAirnE5hS/4OdKaMGAoXuOH/TE8cp3k

Entry address:
0x361F5C

Entry point:
48, 83, EC, 28, E8, 97, F4, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 8B, C1, 49, 83, F8, 08, 72, 53, 0F, B6, D2, 49, B9, 01, 01, 01, 01, 01, 01, 01, 01, 49, 0F, AF, D1, 49, 83, F8, 40, 72, 1E, 48, F7, D9, 83, E1, 07, 74, 06, 4C, 2B, C1, 48, 89, 10, 48, 03, C8, 4D, 8B, C8, 49, 83, E0, 3F, 49, C1, E9, 06, 75, 39, 4D, 8B, C8, 49, 83, E0, 07, 49, C1, E9, 03, 74, 11, 66, 66, 66, 90, 90, 48, 89, 11, 48, 83, C1, 08, 49, FF, C9, 75, F4...
 
[+]

Entropy:
6.1012

Code size:
4.1 MB (4,322,816 bytes)

Service
Display name:
COMODO Internet Security Helper Service

Service name:
cmdAgent

Type:
Win32OwnProcess

Group:
COM Infrastructure

Depends on:
RpcSs


The file cmdagent.exe has been discovered within the following programs.

COMODO Antivirus  by COMODO
Publisher's description - “Comodo Antivirus is the free way to rid your computer of viruses, malware, Trojans, worms, hackers, and other Internet threats. Scan any drive or file. Get in-depth reports on viral activity. Detect suspicious files that behave like viruses do. Even scan compressed .”
www.comodo.com/home/internet-security/antivirus.php
7% remove it
COMODO Firewall  by COMODO
Publisher's description - “Comodo's free Firewall is your first layer of defense against viruses, worms, Trojans, hackers and all Internet threats. Comodo's Firewall uses Default Deny Protection to prevent threats from occurring, rather than just detecting them when it's already too late.”
www.comodo.com/home/internet-security/firewall.php
7% remove it
COMODO Internet Security Premium  by COMODO
Publisher's description - “Comodo Internet Security is the free, multi-layered, security application that offers complete protection from viruses, Trojans, worms, buffer overflows, zero-day attacks, spyware and hackers.”
www.comodo.com
22% remove it
COMODO Internet Security Pro  by COMODO
23% remove it
 
Powered by Should I Remove It?

Scan cmdagent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.