CmdID

CmdID / Files

DeviceProperties.exe

Device Properties file version info

Program on Windows 8 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real DeviceProperties.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDevice Properties

8 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DeviceProperties.exe · signed by Microsoft Windows

a2a49597b1727f39e560cb56a512484484bf99136de29dce27de6ff652be95c3

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\DeviceProperties.exe · signed by Microsoft Windows

15522b3b263d5f4a88a61162033dad8286d601985fd13edf04fe8e7f5e54ac14

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DeviceProperties.exe · signed by Microsoft Windows

8c7745a1c7c946d6b3cb820c119d78227448f14ac19d707a3e622280867082d9

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\DeviceProperties.exe · signed by Microsoft Windows

45ae712fcf3b3f5259c850d4ba0531ad656f6c770155d0bb306e1637c1c7fd6b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\DeviceProperties.exe · signed by Microsoft Windows

a81be954d3361d2bbdc1b658807dd671963e23e51c1202ccae69190b8be735db

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\DeviceProperties.exe · signed by Microsoft Windows

e0197c3f2d9fd1b54e711ec4fd84078e8e809ce3e77a2fa4050c5085f6160fe1

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\DeviceProperties.exe · not signed

75b7edf2f114f6fbf776c538687b1930111748a73d9331d456ebfefad069c7df

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\DeviceProperties.exe · not signed

88adce2a998c4cea65e0b08eaee2a7db401ff4c13e455586bb6270ef7a9557be

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.