home

cmdagent.exe

COMODO Internet Security

Comodo Security Solutions, Inc.

It runs as a separate (within the context of its own process) windows Service named “COMODO Internet Security Helper Service”. This is installed with multiple programs including COMODO Antivirus and COMODO Firewall.
Publisher:
COMODO  (signed by Comodo Security Solutions, Inc.)

Product:
COMODO Internet Security

Version:
7, 0, 317799, 4142

MD5:
5b33c08de574da58606b61cfccd3f082

SHA-1:
c71b029233c96d82fb79696d63a74e286ddce0c6

SHA-256:
f88d7bd25d32c2a59ad602dbfed8ca061635b8fef98cff93715260b1925d1c4e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:19:29 AM UTC  (today)

File size:
6.5 MB (6,817,544 bytes)

Product version:
7, 0, 317799, 4142

Copyright:
2005-2014 COMODO. All rights reserved.

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\comodo\comodo internet security\cmdagent.exe

Digital Signature
Signed by:
Comodo Security Solutions, Inc.

Authority:
VeriSign, Inc.

Valid from:
2/18/2013 1:00:00 AM

Valid to:
4/20/2014 1:59:59 AM

Subject:
CN="Comodo Security Solutions, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Comodo Security Solutions, Inc.", L=Clifton, S=New Jersey, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
147A12FD3751E51604AE354C04A6A272

File PE Metadata
Compilation timestamp:
4/16/2014 10:43:13 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:OjvjMJfrWt/iC+yjpyGTFkjavNwbWwMD2d:Yvj6fKt/iYyqwiTD

Entry address:
0x36294C

Entry point:
48, 83, EC, 28, E8, 97, F4, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 8B, C1, 49, 83, F8, 08, 72, 53, 0F, B6, D2, 49, B9, 01, 01, 01, 01, 01, 01, 01, 01, 49, 0F, AF, D1, 49, 83, F8, 40, 72, 1E, 48, F7, D9, 83, E1, 07, 74, 06, 4C, 2B, C1, 48, 89, 10, 48, 03, C8, 4D, 8B, C8, 49, 83, E0, 3F, 49, C1, E9, 06, 75, 39, 4D, 8B, C8, 49, 83, E0, 07, 49, C1, E9, 03, 74, 11, 66, 66, 66, 90, 90, 48, 89, 11, 48, 83, C1, 08, 49, FF, C9, 75, F4...
 
[+]

Code size:
4.1 MB (4,325,888 bytes)

Service
Display name:
COMODO Internet Security Helper Service

Service name:
CmdAgent

Type:
Win32OwnProcess

Group:
COM Infrastructure

Depends on:
RpcSs


The file cmdagent.exe has been discovered within the following programs.

COMODO Antivirus  by COMODO
Publisher's description - “Comodo Antivirus is the free way to rid your computer of viruses, malware, Trojans, worms, hackers, and other Internet threats. Scan any drive or file. Get in-depth reports on viral activity. Detect suspicious files that behave like viruses do. Even scan compressed .”
www.comodo.com/home/internet-security/antivirus.php
7% remove it
COMODO Firewall  by COMODO
Publisher's description - “Comodo's free Firewall is your first layer of defense against viruses, worms, Trojans, hackers and all Internet threats. Comodo's Firewall uses Default Deny Protection to prevent threats from occurring, rather than just detecting them when it's already too late.”
www.comodo.com/home/internet-security/firewall.php
7% remove it
COMODO Internet Security Premium  by COMODO
Publisher's description - “Comodo Internet Security is the free, multi-layered, security application that offers complete protection from viruses, Trojans, worms, buffer overflows, zero-day attacks, spyware and hackers.”
www.comodo.com
22% remove it
COMODO Internet Security Pro  by COMODO
23% remove it
 
Powered by Should I Remove It?

Scan cmdagent.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.