CmdID

CmdID / Files

AppVShNotify.exe

Microsoft Application Virtualization Client Shell Notifier file version info

Program on Windows 8 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real AppVShNotify.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Program Files\Common Files\microsoft shared\ClickToRun\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Application Virtualization Client Shell Notifier

8 known copies

10.0.22000.282 (WinBuild.160101.0800) · C:\WINDOWS\system32\AppVShNotify.exe · signed by Microsoft Windows

6a036f053d295a2119d5296896b190d5ed9330aaf5d78a866cd38dd23b856c28

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\AppVShNotify.exe · signed by Microsoft Windows

eceee47cd852e7a867ffc81f998a0702bb04c2d98247dbf98662bbe924748b44

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\AppVShNotify.exe · signed by Microsoft Windows

e08ed858efcc15393fb0c84adaeeda6a97a334c2a9eb6d45c6202953c3daf171

10.0.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\AppVShNotify.exe · signed by Microsoft Windows

0d586127b09d2bf2547cb614f95210e87142fc61cd3dd6209c7c640e37df4186

10.0.18362.815 (WinBuild.160101.0800) · C:\WINDOWS\system32\AppVShNotify.exe · signed by Microsoft Windows

7cc3974eec78eea4612a4f9aa43723c69cea3662bf0dcacd1881fb0e559c5702

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\AppVShNotify.exe · signed by Microsoft Windows

071da06da3d61e49c4a0edca37097b39b7c96a1aa820453f8cc6c8aa55cfd98e

10.0.14393.3659 (rs1_release_1.200410-1813) · C:\Windows\system32\AppVShNotify.exe · signed by Microsoft Windows

feedf7e94b5f6079f8154dbe53299d483246986ac06a64c7be2ae63c3cbf55ac

5.1.154.0 · C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe · signed by Microsoft Corporation

6d54694077faf07473196da7b7f1c6981c8ad6a462fcea4777a80cfc6bc5769e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.