CmdID

CmdID / Files

fhmanagew.exe

File History Management Tool file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real fhmanagew.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionFile History Management Tool

4 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\fhmanagew.exe · signed by Microsoft Windows

427ebbc7e031c75ebf99312c6632f1eb5bb320fde19109571e561ce8e667c83b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\fhmanagew.exe · signed by Microsoft Windows

667826a98790e2e1e623d735f029cf6857d77c6c569e460cdab80e33f89295eb

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\fhmanagew.exe · signed by Microsoft Windows

d637bc5fea9a49f354326c754a947449e3aa08e6c2e0bdc5c882d354fb7b8755

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\fhmanagew.exe · signed by Microsoft Windows

9366f4128331d7558355c79525497fa847da785f9bb8a9c3c6f4f523b15b6bc5

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.