CmdID

CmdID / Files

SlideToShutDown.exe

SlideToShutDown file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SlideToShutDown.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSlideToShutDown

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SlideToShutDown.exe · signed by Microsoft Windows

c1807a8c31ab917309500534235e7328ab32140f8e8376031ed3adb58ff1184d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SlideToShutDown.exe · signed by Microsoft Windows

c167f7c83952a95633ad4b65d419d162f85066dea159cb011e771c7c1e07476f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SlideToShutDown.exe · signed by Microsoft Windows

9dae3b73950a5927a4a531ab0703e6703f43247823bb7c9bd921660a3f4dd182

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\SlideToShutDown.exe · signed by Microsoft Windows

3ef3bf77dc2440bb6a234ce5f42c916dc9359b5ea452680676a0be85c6ad459b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\SlideToShutDown.exe · signed by Microsoft Windows

3c7f1b161f75f6849dbb9891d45ca40d02d0bee32772364e41e60bb66a806642

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.