CmdID

CmdID / Files

DeviceEject.exe

Eject Device file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real DeviceEject.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionEject Device

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DeviceEject.exe · signed by Microsoft Windows

0dcb5f74a29a04b872e1948523baac36af09bc33403b0eb766f4c6de7e1fa7f4

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\DeviceEject.exe · signed by Microsoft Windows

14a69b5e05a8496ebca246b356ab318a32df3b563e4f375c6bbae07e87b8de51

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DeviceEject.exe · signed by Microsoft Windows

527c92c4653b623bcd267898b8b5e6c06ddaa1e418b6e4ff9f25c58d01a05baf

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\DeviceEject.exe · signed by Microsoft Windows

8c7d1a4a1f1f8732a92eb1edf3384c0b5496246a40a88165d9845a805a90899b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\DeviceEject.exe · signed by Microsoft Windows

bf114a11688a5ff9e1a665f8e57f43f37743ba9445f8b8a5756322ad807472d9

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\DeviceEject.exe · not signed

106907dff5890c52f7e82219bce498718d6a41c6f2c0b458ede79408beb770b8

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.