comp.exe

  • File Path: C:\WINDOWS\system32\comp.exe
  • Description: File Compare Utility

Hashes

Type Hash
MD5 82EF1889BC4D1991A7CEE4D1BC2C48F1
SHA1 9C9E19B720492D5316BF696AAED5D59CEBAB30AA
SHA256 9B9110AC2A288040ECBC294BC417D9DF5CC54A902EF16923F4558D596DBC45B5
SHA384 1BA5C1834E98D70EC0638848EFFC609774038EA0FCB584259EC34E4669526483F8B841047D3FDE71B4D70C8C092AB639
SHA512 956C6FF1369A86E74980AC37BAA0E8AFC944E0918695162CA1DFF1A5ACE45B32A2FAAC2E5C5938F627D810866B8875262782DE9FEB3A9AA11D6F19EAD6DC3229
SSDEEP 384:+LtAYAoe7mdosjVo/Rx5V35fR6ZZ0bzKWbOmLx4KXOwC+mlNjWDcW:SGZorTjV2FB5fR6Zg+Wdx1XAl6
IMP A0490E6736BAFC5BA5569D1B32266468
PESHA1 5C9C31415A565F0AC6E98FA9D46F49359AA135BA
PE256 CBB21DBA706F7BB9417ED0F515125735F60695513E1AE02B2EA176B0302CEC62

Runtime Data

Usage (stdout):

Compares the contents of two files or sets of files.

COMP [data1] [data2] [/D] [/A] [/L] [/N=number] [/C] [/OFF[LINE]] [/M]

  data1      Specifies location and name(s) of first file(s) to compare.
  data2      Specifies location and name(s) of second files to compare.
  /D         Displays differences in decimal format.
  /A         Displays differences in ASCII characters.
  /L         Displays line numbers for differences.
  /N=number  Compares only the first specified number of lines in each file.
  /C         Disregards case of ASCII letters when comparing files.
  /OFF[LINE] Do not skip files with offline attribute set.
  /M         Do not prompt for compare more files.

To compare sets of files, use wildcards in data1 and data2 parameters.

Usage (stderr):

Name of second file to compare: 

Child Processes:

conhost.exe

Open Handles:

Path Type
(R-D) C:\Windows\System32\en-US\ulib.dll.mui File
(RW-) C:\Windows\System32 File
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\WINDOWS\system32\comp.exe
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: Comp.Exe.MUI
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/9b9110ac2a288040ecbc294bc417d9df5cc54a902ef16923f4558d596dbc45b5/detection

Additional Info*

*The information below is copied from MicrosoftDocs, which is maintained by Microsoft. Available under CC BY 4.0 license.


comp

Compares the contents of two files or sets of files byte-by-byte. These files can be stored on the same drive or on different drives, and in the same directory or in different directories. When this command compares files, it displays their location and file names. If used without parameters, comp prompts you to enter the files to compare.

Syntax

comp [<data1>] [<data2>] [/d] [/a] [/l] [/n=<number>] [/c]

Parameters

Parameter Description
<data1> Specifies the location and name of the first file or set of files that you want to compare. You can use wildcard characters (* and ?) to specify multiple files.
<data2> Specifies the location and name of the second file or set of files that you want to compare. You can use wildcard characters (* and ?) to specify multiple files.
/d Displays differences in decimal format. (The default format is hexadecimal.)
/a Displays differences as characters.
/l Displays the number of the line where a difference occurs, instead of displaying the byte offset.
/n=<number> Compares only the number of lines that are specified for each file, even if the files are different sizes.
/c Performs a comparison that is not case-sensitive.
/off[line] Processes files with the offline attribute set.
/? Displays Help at the command prompt.

Remarks

  • During the comparison, comp displays messages that identify the locations of unequal information between the files. Each message indicates the offset memory address of the unequal bytes and the contents of the bytes (in hexadecimal notation unless the /a or /d command-line parameter is specified). Messages appear in the following format:

      Compare error at OFFSET xxxxxxxx
      file1 = xx
      file2 = xx
    

    After ten unequal comparisons, comp stops comparing the files and displays the following message:

    10 Mismatches - ending compare

  • If you omit necessary components of either data1 or data2, or if you omit data2 entirely, this command prompts you for the missing information.

  • If data1 contains only a drive letter or a directory name with no file name, this command compares all of the files in the specified directory to the file specified in data1.

  • If data2 contains only a drive letter or a directory name, the default file name for data2 becomes the same name as for data1.

  • If the comp command can’t find the specified files, it will prompt you with a message about whether you want to compare additional files.

  • The files that you compare can have the same file name, provided they’re in different directories or on different drives. You can use wildcard characters (* and ?) to specify file names.

  • You must specify /n to compare files of different sizes. If the file sizes are different and /n isn’t specified, the following message is displayed:

      Files are different sizes
      Compare more files (Y/N)?
    

    To compare these files anyway, press N to stop the command. Then, run the comp command again, using the /n option to compare only the first portion of each file.

  • If you use wildcard characters (* and ?) to specify multiple files, comp finds the first file that matches data1 and compares it with the corresponding file in data2, if it exists. The comp command reports the results of the comparison for each file matching data1. When finished, comp displays the following message:

    Compare more files (Y/N)?

    To compare more files, press Y. The comp command prompts you for the locations and names of the new files. To stop the comparisons, press N. When you press Y, you’re prompted for which command-line options to use. If you don’t specify any command-line options, comp uses the ones you specified before.

Examples

To compare the contents of the directory c:\reports with the backup directory \\sales\backup\april, type:

comp c:\reports \\sales\backup\april

To compare the first ten lines of the text files in the \invoice directory and display the result in decimal format, type:

comp \invoice\*.txt \invoice\backup\*.txt /n=10 /d

Additional References


MIT License. Copyright (c) 2020-2021 Strontic.