CmdID

CmdID / Files

DFDWiz.exe

Windows Disk Diagnostic User Resolver file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real DFDWiz.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Disk Diagnostic User Resolver

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DFDWiz.exe · signed by Microsoft Windows

222cef8785eeb5a741fdc1373020ac64908a195f534135b33bdaaa0810e0f761

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\DFDWiz.exe · signed by Microsoft Windows

548a3c7ec9ad1bb63f6cc21f4ae2a3b2317efad5b02031f542a18e3132022972

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\DFDWiz.exe · signed by Microsoft Windows

4d337574c6c2a46e5197e013f0541e5cad31740c154750d6a9d6f75fcf6d879f

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\DFDWiz.exe · signed by Microsoft Windows

6b2eea8205fb9a603f49a638cfba45a0c32d71c8f26e9b10cb01050b42fd0bd8

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\DFDWiz.exe · signed by Microsoft Windows

60cd7954bbe02422f9c28fc95b234426615d3f5dbaf7f7d2b733ada657c6d406

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.