CmdID

CmdID / Files

OptionalFeatures.exe

Windows Features file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real OptionalFeatures.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Features

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\OptionalFeatures.exe · signed by Microsoft Windows

33ef5300add8b06fbe0d8e4078d2a32ec9950e9eed303ccdea7795e0012a227a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\OptionalFeatures.exe · signed by Microsoft Windows

fa2e741416994f2c1bf9ef7a16b9c4dbf20c84267e3da91ae6f1ad75ee9f49b8

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\OptionalFeatures.exe · signed by Microsoft Windows

87f02bbc0198b86c0ac6b76d79d46a8074db0f58641e3f23f760644d79b1aa16

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\OptionalFeatures.exe · signed by Microsoft Windows

aa82381aeff9d1908f76d5ffcf7dbf2492ce4725af7df06818e6d574b97ea1cb

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\OptionalFeatures.exe · signed by Microsoft Windows

912efe8a50daab7a746b0740b7394b05bb01dd4383ee50ca331a1c22a94c80dc

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.