CmdID

CmdID / Files

PresentationSettings.exe

Microsoft Mobile PC Presentation Adaptability Client file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real PresentationSettings.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Mobile PC Presentation Adaptability Client

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\PresentationSettings.exe · signed by Microsoft Windows

14e5030e3599c90feb9325a8a5eae992a429325e6e1c70bfae157c1c28210105

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\PresentationSettings.exe · signed by Microsoft Windows

6e59ab1a0b4ac177dc3397a54afcf68fcea3c1ee72c33bd08c89f04a6dac64b8

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\PresentationSettings.exe · signed by Microsoft Windows

abec1c5e268a7369805def86ae0193a54994670bffac70592a03843e1e3bb15d

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\PresentationSettings.exe · signed by Microsoft Windows

a1f2954dbb7d9111fb2dc9497a320e29e3a0cc2c00afe9d96c58f78b1247cd70

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\PresentationSettings.exe · signed by Microsoft Windows

06ca05848ed445ecba3523bc69fe6187b951b2d81c243c88a479399e1001842b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.