CmdID

CmdID / Files

ApplicationFrameHost.exe

Application Frame Host file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ApplicationFrameHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionApplication Frame Host

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\ApplicationFrameHost.exe · signed by Microsoft Windows

2d5399c92ec3cb73449c2cc704635d61b3654bf25b95ccf3299a6364b6b7ae17

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\ApplicationFrameHost.exe · signed by Microsoft Windows

cf58e424b86775e6f2354291052126a646f842fff811b730714dfbbd8ebc71a4

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\ApplicationFrameHost.exe · signed by Microsoft Windows

5da7a338fa478c96e83a27db481e39c1f2689e9016cf9aa7ff5cd2bff32f33f2

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\ApplicationFrameHost.exe · signed by Microsoft Windows

71a1ca978834c0ddbab05e3987cb4bd6cc2783f9e05b3d00c8fcd333349528ac

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\system32\ApplicationFrameHost.exe · signed by Microsoft Windows

ed51f16e0acb2707e509ad476f8ee600038b6ac42a9588a054e501cafe598132

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\ApplicationFrameHost.exe · signed by Microsoft Windows

1149ba08c3c39e66f8d56898c809fff97ad5693c686d820fc5301f6113ed9b9b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.