CmdID

CmdID / Files

appidcertstorecheck.exe

AppID Certificate Store Verification Task file version info

Program on Windows 9 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real appidcertstorecheck.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAppID Certificate Store Verification Task

9 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\appidcertstorecheck.exe · signed by Microsoft Windows

c6faf1ac23bd9dda44c856476a2ee268fd343d690d2d7bc0d0fa937aafa81ed9

10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\system32\appidcertstorecheck.exe · signed by Microsoft Windows

5afdc8ae3aac555a3ddc317d8aa05eab3a7a24ac5641c3a7162aac96f511f6d3

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\appidcertstorecheck.exe · signed by Microsoft Windows

f261b3fd79db4d209fa544c91d188c7c20d370c0e894cb51df4906f2f5848b34

10.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\system32\appidcertstorecheck.exe · signed by Microsoft Windows

6cbc308b5d776398983d312a5d8227a80e131a93fa5130daf71c3cac28f9ad71

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\appidcertstorecheck.exe · signed by Microsoft Windows

5e4a7e55f294ef8743d083fd18a90ee092a93c30ca08b165ff8d06ba55101ee0

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\appidcertstorecheck.exe · signed by Microsoft Windows

a67bcc238c3d707ed3d78bcb8d47ba05361b3d5c63651bee56860a3d1830ed8d

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\appidcertstorecheck.exe · signed by Microsoft Windows

f00ea11118b39d06a3d361e851b6d13b29a3fc0c787ab763e9c351f718cb90bb

10.0.14393.1198 (rs1_release_sec.170427-1353) · C:\Windows\system32\appidcertstorecheck.exe · signed by Microsoft Windows

90be9841349df2465522a3b8f1404ca886e227c87bb9c986dbf98935cc72b5db

6.3.9600.18759 (winblue_ltsb.170708-0600) · C:\windows\system32\appidcertstorecheck.exe · not signed

ee1d95956f4f904c0e4a4cf9914a7f5b95dda1b83aa897dcc12028688f4641a1

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.