CmdID

CmdID / Files

AppHostRegistrationVerifier.exe

App Uri Handlers Registration Verifier file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real AppHostRegistrationVerifier.exe?

file version info and known copies
Original nameAppHostNameRegistrationVerifier.exe in the file’s header: a renamed copy still carries it
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionApp Uri Handlers Registration Verifier

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\AppHostRegistrationVerifier.exe · signed by Microsoft Windows

8d857a27b6d49656d267a9a53d07f26dfb7cf9bdc5966e5ae2a8c5cfc41157d5

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AppHostRegistrationVerifier.exe · signed by Microsoft Windows

69c0d08149aee10f9a6ee68d19143e2ce80047ab9e07fbda5b2bf964e06a03ce

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AppHostRegistrationVerifier.exe · signed by Microsoft Windows

b50c8bd4935d56f398eca98339a038f68362392f679514753f3f986b8e345186

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\AppHostRegistrationVerifier.exe · signed by Microsoft Windows

11454c4445776c8f03fa68f231522decbe191404c1e8309df357b45b58c2bd84

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\AppHostRegistrationVerifier.exe · signed by Microsoft Windows

619e84381f1387b59b623ecf8e8ce46f661c2e6f41a5ca908ac670f180ea7dff

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\AppHostRegistrationVerifier.exe · signed by Microsoft Windows

3d134e850306ae1dfbcc84f01503a8b63438ce72aac1c62b9df420db28100114

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.