OptionalFeatures.exe

• File Path: C:\WINDOWS\system32\OptionalFeatures.exe
• Description: Windows Features

Hashes

Type	Hash
MD5	EF0418CF89AD1C48D855A11F162AA08D
SHA1	BF7A5CBC1ADC8463634BD2F5EAE85CFF1F552209
SHA256	87F02BBC0198B86C0AC6B76D79D46A8074DB0F58641E3F23F760644D79B1AA16
SHA384	83D91E89955FD60E907C0BB178F72F990C0538C949291F881B9AA3D853BF62FDF8AD22E96BD7D77970129D065342C796
SHA512	2DDA8965E003DEA73D1CA9AC5E7CC2220593F23A2EC2D53B43400577A05487CFDAD5C0E749388EA2102A4CF8E37DE11DB1A96E95C529D6D4C06C8520708F9E5F
SSDEEP	3072:7bOJ8bEaznWfH22ZsuX2xKwMPTnaSrIrvD4:7bSSznWjZnXeKwMLnaqY

Signature

• Status: Signature verified.
• Serial: 330000023241FB59996DCC4DFF000000000232
• Thumbprint: FF82BC38E1DA5E596DF374C53E3617F7EDA36B06
• Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
• Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

• Original Filename: OptionalFeatures.EXE.MUI
• Product Name: Microsoft Windows Operating System
• Company Name: Microsoft Corporation
• File Version: 10.0.18362.1 (WinBuild.160101.0800)
• Product Version: 10.0.18362.1
• Language: English (United States)
• Legal Copyright: Microsoft Corporation. All rights reserved.

File Similarity (ssdeep match)

File	Score
C:\Windows\system32\Fondue.exe	86
C:\windows\system32\Fondue.exe	88
C:\WINDOWS\system32\Fondue.exe	85
C:\WINDOWS\system32\Fondue.exe	82
C:\Windows\system32\Fondue.exe	85
C:\Windows\system32\Fondue.exe	86
C:\WINDOWS\system32\OptionalFeatures.exe	80
C:\Windows\system32\OptionalFeatures.exe	86
C:\Windows\system32\OptionalFeatures.exe	91
C:\Windows\system32\OptionalFeatures.exe	88
C:\Windows\SysWOW64\Fondue.exe	88
C:\WINDOWS\SysWOW64\Fondue.exe	91
C:\windows\SysWOW64\Fondue.exe	82
C:\WINDOWS\SysWOW64\Fondue.exe	80
C:\Windows\SysWOW64\Fondue.exe	85
C:\Windows\SysWOW64\Fondue.exe	85

MIT License. Copyright (c) 2020-2021 Strontic.