Jump to content

Recommended Posts

Posted

Hi,

 

I've just ran a custom report using PDQ Deploy to look at cmd.exe file sizes to make sure nobody is exploiting the well-known 'Ease-of-Access/utilman.exe/cmd.exe' hack and noticed that one computer has a different file size than the others.

 

All machines are running W7 Pro and are all fully updated so I can't get my head around why the cmd.exe on this one PC is a difference file size. It's even more strange as the 'File Created' field says it was created 1 day earlier than the files on all the other hundred-odd computers.

 

Any ideas?

 

(PDQ Deploy report screenshot below)

 

cmd screenshot.png

 

Thanks

Posted
You know when something's bugging you then you have that lightbulb moment? Well figured it out last night whilst chopping onions...the CMD.exe on the black sheep machine is running 32bit Windows, the rest are 64bit. So that explains the file size difference. Doh!
  • Thanks 2

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...