CmdID

CmdID / Files

GoogleUpdateComRegisterShell64.exe

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real GoogleUpdateComRegisterShell64.exe?

file version info and known copies
Installed inC:\Program Files (x86)\Google\Update\1.3.35.452\
C:\Program Files (x86)\Google\Update\1.3.36.112\
Signed byGoogle LLC

2 known copies

Version not recorded · C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleUpdateComRegisterShell64.exe · signed by Google LLC

c49b42e079880fc4d12a9c1c8a9e66b12e0d6675a8777c1d83a9fd6e958ba0aa

Version not recorded · C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleUpdateComRegisterShell64.exe · signed by Google LLC

cf8030ca9ad7129d986de4ade755cf74225e18c7ac869786ed7f2edc0afc811d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.