DFDWiz.exe
Windows Disk Diagnostic User Resolver file version info
Program on Windows 5 known copies with hashes
Is it the real DFDWiz.exe?
C:\Windows\system32\5 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DFDWiz.exe · signed by Microsoft Windows
222cef8785eeb5a741fdc1373020ac64908a195f534135b33bdaaa0810e0f76110.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\DFDWiz.exe · signed by Microsoft Windows
548a3c7ec9ad1bb63f6cc21f4ae2a3b2317efad5b02031f542a18e313202297210.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DFDWiz.exe · signed by Microsoft Windows
4d337574c6c2a46e5197e013f0541e5cad31740c154750d6a9d6f75fcf6d879f10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\DFDWiz.exe · signed by Microsoft Windows
6b2eea8205fb9a603f49a638cfba45a0c32d71c8f26e9b10cb01050b42fd0bd810.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\DFDWiz.exe · signed by Microsoft Windows
60cd7954bbe02422f9c28fc95b234426615d3f5dbaf7f7d2b733ada657c6d406From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.