CmdID

CmdID / Files

AuthHost.exe

Microsoft AuthHost file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real AuthHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft AuthHost

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\AuthHost.exe · signed by Microsoft Windows

062c9595667a091f9d151ea1177151855a736d1df6af37db742b09a0c5b08ad8

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AuthHost.exe · signed by Microsoft Windows

7b24c56bd854742a55ccb2210846b71a48ee821b1dfa1ef70918b63da0005a1a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AuthHost.exe · signed by Microsoft Windows

bb2930598067ccf0a4a0d30da17ae5bbb44639b300a9aa334c4e0857437883b1

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\AuthHost.exe · signed by Microsoft Windows

90eef4a99736e9ec17d8e54918a435b04f132dae116fc90c53ff1a1260929886

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\AuthHost.exe · signed by Microsoft Windows

ea48b4f5787d0941991b17a9a2075cd89f8217cd00260c5283e2a2bf97efac64

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\AuthHost.exe · signed by Microsoft Windows

eb526fcfba01cb683afe421ffdb38be6e2633003c96bc193ca5bac71e418c613

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\AuthHost.exe · signed by Microsoft Windows

4e780d73364401249299787505e10d9cc220f87d1e5316a122ec81ee08167b8c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.