CmdID

CmdID / Files

verifier.exe

Verifier Configuration Editor file version info

Program on Windows 7 known copies with hashes Command verifier

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real verifier.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionVerifier Configuration Editor

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\verifier.exe · signed by Microsoft Windows

df92f34f9b3a5a972cc1feefbd4bf683e563e7c98699e3b82fe6b2eea49cb203

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\verifier.exe · signed by Microsoft Windows

608af8aef15ba4f75996d46249a428ebbff1551de06f6eb6a053c2c330da6965

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\verifier.exe · signed by Microsoft Windows

21c898775e0640eabd0d1cf03a7a69336bcb08ba28a27c34fa4a211c66f6be66

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\verifier.exe · signed by Microsoft Windows

9dc1e17904c26fb63f7568087df8e844714e567d31e0caf03ec56941525b16f7

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\verifier.exe · signed by Microsoft Windows

73ada769002ee3d7d6ef6cbfa9f10f6e547ae229c6458e4ca66704cbc8f56fab

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\verifier.exe · not signed

8d4e7887f9b0792eea1306cae981edd960155ae6877766b2122c3eddeb0d82bb

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\verifier.exe · not signed

f1c3b48b2579225f3cba19a3d8d26e71038647771981801348c9bed3348f4542

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.