OptionalFeatures.exe

• File Path: C:\Windows\system32\OptionalFeatures.exe
• Description: Windows Features

Hashes

Type	Hash
MD5	9BDA0F9DCFDB837F1A5298940EC51B9A
SHA1	6DCF91C77C254F6DBDDB4E76931ECA1BA46C0955
SHA256	912EFE8A50DAAB7A746B0740B7394B05BB01DD4383EE50CA331A1C22A94C80DC
SHA384	2D1B05DB331F2894042E1D72612C7A524F5EEEC014B05BF17364D7E174C757007748877BA47E2E36C9148D3829FED20C
SHA512	50F259E58C2E382131F7A3F87DA43CBCE27BA993E25AF6290EE5521E1DD91607E11D1B3440310904C6A725A9F99DBA7F6DDB72AAD29E2315BC926B9D7B173F46
SSDEEP	3072:JC1yBbEaznWfH22ZsuX2xKwMPTnaSrIrvDT:JCc9znWjZnXeKwMLnaqY

Signature

• Status: Signature verified.
• Serial: 33000000BCE120FDD27CC8EE930000000000BC
• Thumbprint: E85459B23C232DB3CB94C7A56D47678F58E8E51E
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: OptionalFeatures.EXE.MUI
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.14393.0 (rs1_release.160715-1616)
• Product Version: 10.0.14393.0
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\Fondue.exe	82
C:\windows\system32\Fondue.exe	88
C:\WINDOWS\system32\Fondue.exe	82
C:\WINDOWS\system32\Fondue.exe	77
C:\Windows\system32\Fondue.exe	85
C:\Windows\system32\Fondue.exe	86
C:\WINDOWS\system32\OptionalFeatures.exe	80
C:\Windows\system32\OptionalFeatures.exe	85
C:\WINDOWS\system32\OptionalFeatures.exe	86
C:\Windows\system32\OptionalFeatures.exe	88
C:\Windows\SysWOW64\Fondue.exe	85
C:\WINDOWS\SysWOW64\Fondue.exe	86
C:\windows\SysWOW64\Fondue.exe	85
C:\WINDOWS\SysWOW64\Fondue.exe	80
C:\Windows\SysWOW64\Fondue.exe	85
C:\Windows\SysWOW64\Fondue.exe	85

MIT License. Copyright (c) 2020-2021 Strontic.