CmdID

CmdID / Files

NetHost.exe

EXE for configuring VPN proxy file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real NetHost.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionEXE for configuring VPN proxy

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\NetHost.exe · signed by Microsoft Windows

8a42255e179382de584800c74d21180f4318ff8322706e4423311e1ee6fa7a1c

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\NetHost.exe · signed by Microsoft Windows

ba3426f2b9c5b657f38721bdf7ac3229804597544ff5f4096d9f858ad00c8a3d

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\NetHost.exe · signed by Microsoft Windows

ad7a9c336d8e7279504bed79e6cafc974a9485f59b7d4bea69e42f0b5588a15c

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\NetHost.exe · signed by Microsoft Windows

77264f41c4107b9c7e9abc32e82cf0f6097f16902de096f32bdd0ec298c07ad2

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\NetHost.exe · signed by Microsoft Windows

2a6cc76948dfe739428ed2fe5ba391861291ecec7a48817862851c69c5de370b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.