CmdID

CmdID / Files

appidpolicyconverter.exe

AppID Policy Converter Task file version info

Program on Windows 9 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real appidpolicyconverter.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAppID Policy Converter Task

9 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\appidpolicyconverter.exe · signed by Microsoft Windows

8402aaf770828d6c1ef332c064ee261162928341ee32f6bff74d8017fced2d40

10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\system32\appidpolicyconverter.exe · signed by Microsoft Windows

024e4e2e61ae722be8f66267b989b6819028c6b4552b9e8238a5bb7cee1ca4dc

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\appidpolicyconverter.exe · signed by Microsoft Windows

414a80743821b0caf21c231ae0dfa06a711ca52bfbc6d659118693cc3d2cac99

10.0.19041.1202 (WinBuild.160101.0800) · C:\Windows\system32\appidpolicyconverter.exe · signed by Microsoft Windows

e1fa9c30363ce5973f884429d332c21af31117ffb9f30aaa78b4576a652824b0

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\appidpolicyconverter.exe · signed by Microsoft Windows

d7660f4bb2d7a9f44a4b6fbc8d55cc00d3c39798cba56022db0ac6c64b41a9ac

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\appidpolicyconverter.exe · signed by Microsoft Windows

621672a69f13a8bb17015dd2f278c9ae1593d3b82636dfbd287677ecdd5498a6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\appidpolicyconverter.exe · signed by Microsoft Windows

139e1b46169664e8530ab0098037858c205e26b7b2021f8a3609091cc07a4bf0

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\appidpolicyconverter.exe · signed by Microsoft Windows

ab4692f6ccacf20bf82675ad415a5e3ad1c3fd0c5526666661e060835edcc33f

6.3.9600.18759 (winblue_ltsb.170708-0600) · C:\windows\system32\appidpolicyconverter.exe · not signed

c8895dbbd0bf9cf64165614db3b13d916c8b6975d972c065ef95a88b4830dbd1

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.