CmdID

CmdID / Files

MicrosoftEdgeBCHost.exe

Microsoft Edge Content Process file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MicrosoftEdgeBCHost.exe?

file version info and known copies
Original nameMicrosoftEdgeCP.exe in the file’s header: a renamed copy still carries it
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Edge Web Platform, Microsoft Corporation
DescriptionMicrosoft Edge Content Process

3 known copies

11.00.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MicrosoftEdgeBCHost.exe · signed by Microsoft Windows

1eeeef0fd28f7106aa5f23e9a5ec38e85982faaec892c9c9bea67c4376ef71f1

11.00.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\MicrosoftEdgeBCHost.exe · signed by Microsoft Windows

91a954fecd74f20b4a25708d7323e64fb4dd4e03997bcf234e7b810f9eb03a95

11.00.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\MicrosoftEdgeBCHost.exe · signed by Microsoft Windows

ee7174ee353e7d29ce17d29d66411b3623c39d9dec3f439e35af47a7e7a7c895

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.