Well, it's actually /system/library/coreservices/VerifiedDownloadAgent.app

has anyone actually used it?