CmdID

CmdID / Files

Preparation.exe

Microsoft Visual Studio 2015 file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Preparation.exe?

file version info and known copies
Installed inC:\ProgramData\Package Cache\00000000-0000-0000-0000-000000000000\packages\patch_KB3110221\
C:\ProgramData\Package Cache\00000000-0000-0000-0000-000000000000\packages\vsupdate_KB3022398\
C:\ProgramData\Package Cache\00000000-0000-0000-0000-000000000000\packages\wdexpress_full\
Signed byMicrosoft Corporation
ProductMicrosoft Visual Studio Preparation, Microsoft Corporation
DescriptionMicrosoft Visual Studio 2015

3 known copies

14.0.24730.2 built by: D14VSULDR · C:\ProgramData\Package Cache\00000000-0000-0000-0000-000000000000\packages\patch_KB3110221\Preparation.exe · signed by Microsoft Corporation

fe5e41220930ac6db6c7413a1f62835a5c5eff9eefb2083f813aa91270a63ca5

14.0.24720.0 built by: D14REL · C:\ProgramData\Package Cache\00000000-0000-0000-0000-000000000000\packages\vsupdate_KB3022398\Preparation.exe · signed by Microsoft Corporation

d01ef8d4fb97d5f19bf0964e238daeabec5e85887d3cd933275718012a239708

14.0.23107.0 built by: D14REL · C:\ProgramData\Package Cache\00000000-0000-0000-0000-000000000000\packages\wdexpress_full\Preparation.exe · signed by Microsoft Corporation

9107bb3c06902071f3bb94e6d9986a57d8bed01ef3074a9fcf11cae66952cbe5

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.