CmdID

CmdID / Files

ScreenClippingHost.exe

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ScreenClippingHost.exe?

file version info and known copies
Installed inC:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClipping\
C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation

4 known copies

2001.22012.0.3920 · C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClipping\ScreenClippingHost.exe · signed by Microsoft Windows

3dbdec8837d65e40c0e3c0a4bde33c08f3eedf30d1f9b257de6bc954cac6030c

2001.22012.0.551 · C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClipping\ScreenClippingHost.exe · signed by Microsoft Windows

4491e15750b98ec9c920df79947b9001c5b48f7285e8938051fbfa45f1328507

2001.22012.0.31 · C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClipping\ScreenClippingHost.exe · signed by Microsoft Windows

4bb0dd05be05d654b4672bb12ed2ec187ee9bdb124606e2431b919c97937ee8b

421.19500.0.0 · C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\ScreenClippingHost.exe · signed by Microsoft Windows

ed515cf87808ad93030392b074687c32e56238a9412bf981af31b3c0c33d6576

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.