CmdID

CmdID / Files

airhost.exe

AirHost file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real airhost.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Zoom\bin\
Signed byZoom Video Communications
ProductAirHost, Zoom Video Communications, Inc.
DescriptionAirHost

4 known copies

5.8.3.1581 · C:\Program Files (x86)\Zoom\bin\airhost.exe · signed by Zoom Video Communications

ca235ab62d364f9868c2ab30219d7879b9c728a79f4570840f19f9d953333488

5.3.52670.0921 · C:\Program Files (x86)\Zoom\bin\airhost.exe · signed by Zoom Video Communications

7a0a4ece3fd24071ca59cc3ac788158cb49a99df47fe6e095e450aa3b2ac3d7a

5.2.44052.0816 · C:\program files (x86)\Zoom\bin\airhost.exe · signed by Zoom Video Communications

fbf4051fe75a94a89d06d191408c17c2ad7ff26f3d8bbade0ab4a33b98e5521f

5.2.42619.0804 · C:\Program Files (x86)\Zoom\bin\airhost.exe · signed by Zoom Video Communications

297ecb1d4b9782647f7adeec54e8a1908cee58733db3b54a0e22dc09efdd2ea5

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.