CmdID

CmdID / Files

F12Chooser.exe

F12 Attach Chooser executable file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real F12Chooser.exe?

file version info and known copies
Installed inC:\Windows\system32\F12\
C:\Windows\SysWOW64\F12\
Signed byMicrosoft Windows
ProductInternet Explorer, Microsoft Corporation
DescriptionF12 Attach Chooser executable

2 known copies

11.00.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\F12\F12Chooser.exe · signed by Microsoft Windows

04ccb5c164a69511bd74631bd6e46422abc3762060764335d14eb0fb808f657f

11.00.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\F12\F12Chooser.exe · signed by Microsoft Windows

e1fa7dd4d4616e40db4e64f63861a341a2474441de14b50f1602536511b5ed24

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.