CmdID

CmdID / Files

hdwwiz.exe

Add Hardware Wizard file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real hdwwiz.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAdd Hardware Wizard

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\hdwwiz.exe · signed by Microsoft Windows

330ca96ce3ad3a00abe9e5a67969c90bb2cef4dc1e10a48668d22a97c43dfd01

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\hdwwiz.exe · signed by Microsoft Windows

825a2cb20cada2f4040f45bde54d87803ac9c408b818f2fe3adf78017ff3159c

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\hdwwiz.exe · signed by Microsoft Windows

5c77fe684533fc41685a2bdf757deb2b428ca342d74697d06a2c9b5aa0de2ff3

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\hdwwiz.exe · signed by Microsoft Windows

81d43ad111bd8b8dad77e0c36e0d420332889fb9b473857dba779ea0c070442c

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\hdwwiz.exe · signed by Microsoft Windows

6bc2793cf2f9f678f5a9883ecc1e7f23a0f804932ab07663bf4e67f0e0e3ca72

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\hdwwiz.exe · signed by Microsoft Windows

8a1347c555701c9d490c871f7d4e47ba011d3c43594dff88529b8e9b1924a949

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\hdwwiz.exe · signed by Microsoft Windows

79cccf88dd152c2ab8be92bc8b835cda56728d381be3617042620b0a5cd9308b

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\hdwwiz.exe · signed by Microsoft Windows

a18f734a82ee009f0af72768b6a22dc585083296c1cb7499a280ff603281cdfc

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\hdwwiz.exe · signed by Microsoft Windows

24169d455f8d4fef27c1e80ce609a0bf446126153e6f563085ced82e58ad47e1

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\hdwwiz.exe · signed by Microsoft Windows

60cd15e1b5ebac3aa2e16791034ff848a1c9025840159331af7bd6fb7ff85032

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\hdwwiz.exe · not signed

7f5e46226112a6c38497dd769be55fe72251728c5d0837c69cad2e1a6e3cdc8d

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\hdwwiz.exe · not signed

cadeb025a83fc2d084d609c9858fd055b8528457c49b434ea47a7f301a5817b6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.