CmdID

CmdID / Files

ndadmin.exe

Device driver software installation file version info

Program on Windows 16 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ndadmin.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDevice driver software installation

16 known copies

5.2.3668.0 · C:\Windows\system32\ndadmin.exe · signed by Microsoft Windows

0024ff0b12c24d28ffff6388012b0b69881e3e75b958dfd94b634b8e25ef6205

5.2.3668.0 · C:\Windows\SysWOW64\ndadmin.exe · signed by Microsoft Windows

2e8dedfa67e1a587d52fb19016f418629da825a4c4c6b07638730729f76d12db

5.2.3668.0 · C:\windows\system32\ndadmin.exe · not signed

2e8e87f7792149a122b185879166f269987c8259c2367b62904685ead009443c

5.2.3668.0 · C:\Windows\system32\ndadmin.exe · signed by Microsoft Windows

350e0c3e35d319e7127004e6e40f585ac8ad5d1f807e33ecdc780d9f073dfdba

5.2.3668.0 · C:\Windows\SysWOW64\ndadmin.exe · signed by Microsoft Windows

3bf9b0d64afb7250743bd8c5594d76f0de70373314ede370fdcdf83acf929758

5.2.3668.0 · C:\windows\SysWOW64\ndadmin.exe · not signed

3f8b18728f607789c4b910bcc745c5bce6252ebfd3c8224a1cdcabeb3579e250

5.2.3668.0 · C:\Windows\SysWOW64\ndadmin.exe · signed by Microsoft Windows

46e4b4f4e9b7369dbd24d8bf09b092edb1a0e051f65467562a8a0fe5e5e988ce

5.2.3668.0 · C:\Windows\SysWOW64\ndadmin.exe · signed by Microsoft Windows

5854ccfe32f15c1ff34be30850c4827d2cfac39c698681016266d7a61460dbe3

5.2.3668.0 · C:\WINDOWS\system32\ndadmin.exe · signed by Microsoft Windows

5dd4fd2c94e34f4f4901934c6fba7df742781ef271fcc5811cfb85f17848d386

5.2.3668.0 · C:\Windows\system32\ndadmin.exe · signed by Microsoft Windows

612b00c9c83c96e3e5a866b95a42a21ed42d9c4cc58a8f19297e3e6586976d30

5.2.3668.0 · C:\WINDOWS\SysWOW64\ndadmin.exe · signed by Microsoft Windows

841bb38394e8856340b8c13a786e11861ed78388c909cf33d9ca0a07df08de3a

5.2.3668.0 · C:\WINDOWS\SysWOW64\ndadmin.exe · signed by Microsoft Windows

b1fbaf947170455bfe91c39bb3b1964db36370f2e57eacce7ddab8f613df2a0b

5.2.3668.0 · C:\Windows\SysWOW64\ndadmin.exe · signed by Microsoft Windows

b58000d458791e2c9f0d539267416e73825828dce1c3a851c245c7bf636db890

5.2.3668.0 · C:\Windows\system32\ndadmin.exe · signed by Microsoft Windows

c33db51c283f57aa5169a3ec8367d754d7ad39e2e7b4e2975fdd1d62f221c028

5.2.3668.0 · C:\WINDOWS\system32\ndadmin.exe · signed by Microsoft Windows

dd28d5847dfdfa964f8acf160cefbf7bdd994134af442e0819b5cab88e8f34cd

5.2.3668.0 · C:\Windows\system32\ndadmin.exe · signed by Microsoft Windows

e31a51cdc7cfd3924c2c259b78a5d5165e1eb708f20be9806b5d400f76470ee9

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.