CmdID

CmdID / Files

AppSharingHookController64.exe

Skype for Business file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real AppSharingHookController64.exe?

file version info and known copies
Original nameAppSharingChromeHookController.exe in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\
Signed byMicrosoft Corporation
ProductMicrosoft Office, Microsoft Corporation
DescriptionSkype for Business

1 known copy

16.0.12325.20172 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\AppSharingHookController64.exe · signed by Microsoft Corporation

1a61d82532e15dd14137e577b86d116e79784ae3006dc1d4a5d2ab2773862cd1

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.