CmdID

CmdID / Files

browser_broker.exe

Browser_Broker file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real browser_broker.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionBrowser_Broker

5 known copies

11.00.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\browser_broker.exe · signed by Microsoft Windows

606e082295105bb4773021e52b0be6e286c84bb42c0b0d19150639ff68fd9866

11.00.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\browser_broker.exe · signed by Microsoft Windows

0698e50fc9e661a29476f737375753576d321ea6f15d19579f8fb8746db59e50

11.00.18362.267 (WinBuild.160101.0800) · C:\WINDOWS\system32\browser_broker.exe · signed by Microsoft Windows

1d9585ac850b5554739877ffe2a644b5406a54ac05aa7b37e1df8264555ab7a7

11.00.17763.316 (WinBuild.160101.0800) · C:\Windows\system32\browser_broker.exe · signed by Microsoft Windows

609a3a73a983a1c47511282d31d9fcfe7909950944ac5324344596215cd778aa

11.00.14393.2791 (rs1_release.190205-1511) · C:\Windows\system32\browser_broker.exe · signed by Microsoft Windows

63cab0db2a90dafa855f92bd9505dcf6bd197545a9d5a8fc40c3dfdfdb2ab2cb

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.