CmdID

CmdID / Files

LockAppHost.exe

LockAppHost file version info

Program on Windows 8 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real LockAppHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionLockAppHost

8 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LockAppHost.exe · signed by Microsoft Windows

bb2a4e164a34a4e95ef8208a9b22ddff69e7cf626d3a401818d3a08cf47fd3d9

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\LockAppHost.exe · signed by Microsoft Windows

8bd4c03df66055601cedf50fa31bd226b02da6fffa4d3887e39368375b41c733

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\LockAppHost.exe · signed by Microsoft Windows

a0e3abee637656c2ad5033d89f364f1c98e508cefa5f9e069bcf7430edffa662

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\LockAppHost.exe · signed by Microsoft Windows

a3782fdc5c7b765b7ca37bb3b039a13aaf989883a54bd62a3692868769c30049

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\LockAppHost.exe · signed by Microsoft Windows

8fee82ecedfa6b1e019b5a1b7342638fbddbe0c9c404b46e7aafc392b9404cfe

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\system32\LockAppHost.exe · signed by Microsoft Windows

27002a3328e8288299204b1d1d145de57968534523f5dec668008409080ed1da

10.0.14393.2457 (rs1_release_inmarket.180822-1743) · C:\Windows\SysWOW64\LockAppHost.exe · signed by Microsoft Windows

00f9d9e1daf1cab88796ba4dcce2fa3d11853af5597360b0fbc993b51e610bef

10.0.14393.2457 (rs1_release_inmarket.180822-1743) · C:\Windows\system32\LockAppHost.exe · signed by Microsoft Windows

84e652597ee67bac3a3a8d51523009089027c387f190542e1a9dfe9678d755f2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.