CmdID

CmdID / Files

FileExplorer.exe

File Explorer file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real FileExplorer.exe?

file version info and known copies
Installed inC:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionFile Explorer

2 known copies

10.0.22000.120 (WinBuild.160101.0800) · C:\WINDOWS\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\FileExplorer.exe · signed by Microsoft Windows

b8407cb5cafdfb1447d6049a8a17bcaf912573365ac9b9d404bb1730bc7fcd8c

10.0.19041.546 (WinBuild.160101.0800) · C:\Windows\SystemApps\Microsoft.Windows.FileExplorer_cw5n1h2txyewy\FileExplorer.exe · signed by Microsoft Windows

d2a908c59a91ac03e74cd8a9ad32230ff0b53dc3ca2ca23991cdee049d63a08c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.