CmdID

CmdID / Files

ohub32.exe

Microsoft My Office file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ohub32.exe?

file version info and known copies
Original nameOfficeHubWin32.exe in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\
Signed byMicrosoft Corporation
ProductMicrosoft Office, Microsoft Corporation
DescriptionMicrosoft My Office

1 known copy

16.0.12527.20474 · C:\Program Files (x86)\Microsoft Office\root\vfs\Windows\Installer\{90160000-000F-0000-0000-0000000FF1CE}\ohub32.exe · signed by Microsoft Corporation

b7ef4ebb14ad6ac1a7a97a6ec24f460c9e654be44d8406eec19279a401d0d1c8

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.