CmdID

CmdID / Files

newdev.exe

Device driver software installation file version info

Program on Windows 16 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real newdev.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDevice driver software installation

16 known copies

5.2.3668.0 · C:\windows\system32\newdev.exe · not signed

1e9a0cf47b53ff744e212dc58d1629889187f13038ea6a5e32d5b2e44b279328

5.2.3668.0 · C:\Windows\system32\newdev.exe · signed by Microsoft Windows

2cbf1fa6a259a39e14f3c02c6cd1bef205f7c6bb4b922b61c2e5f17372503481

5.2.3668.0 · C:\Windows\system32\newdev.exe · signed by Microsoft Windows

4500d5b98ef4f901f700a60f9643ac6e31034ff3a72918b68025c7b2ef684f90

5.2.3668.0 · C:\Windows\system32\newdev.exe · signed by Microsoft Windows

59ab9b5c294ee198bd38233306c81328e9d158c48241a5dcf33e42f8fb496308

5.2.3668.0 · C:\Windows\SysWOW64\newdev.exe · signed by Microsoft Windows

626117a7aabf84d6db68e5d670c72ef5d0d586b474ddf5b7eca85b046f97582e

5.2.3668.0 · C:\Windows\SysWOW64\newdev.exe · signed by Microsoft Windows

63f048fccfa164e188cf63ce7870710d89d26212434f30df5e124a0905dd8cc4

5.2.3668.0 · C:\WINDOWS\SysWOW64\newdev.exe · signed by Microsoft Windows

6e53d3c306d25e381735c8cd9c46e09a607be574b0a2986b2ce3271582964c48

5.2.3668.0 · C:\Windows\SysWOW64\newdev.exe · signed by Microsoft Windows

7282cdbeb71f9aceee4e8843054b1aebdf47893439cdd2edc61e6349b89fd423

5.2.3668.0 · C:\Windows\SysWOW64\newdev.exe · signed by Microsoft Windows

7a2247b616b79182d1da55cac21eedfffd9cc6d3efd1b5a6753803dc74522c78

5.2.3668.0 · C:\WINDOWS\system32\newdev.exe · signed by Microsoft Windows

9053a49bb54e13ce6edd8fceba260e5f876975b7dc7ac379dd0a78d7fc39acfa

5.2.3668.0 · C:\WINDOWS\system32\newdev.exe · signed by Microsoft Windows

a99d473accbe095238643625d0c8865ffbe6c10df23fca500e1ac8d98cb24360

5.2.3668.0 · C:\windows\SysWOW64\newdev.exe · not signed

ab3f84f1a8627f2046e19e064ee900e869280e8e8c049ce60615671d6fa84aec

5.2.3668.0 · C:\Windows\SysWOW64\newdev.exe · signed by Microsoft Windows

ce9b35ce076ca17f312a324058925aecf9e389c61f27985a161dabd7b016cf01

5.2.3668.0 · C:\Windows\system32\newdev.exe · signed by Microsoft Windows

de9849562a31642dce4c12683e7769d52c58b11c45b92186989dc5672c77bccb

5.2.3668.0 · C:\Windows\system32\newdev.exe · signed by Microsoft Windows

e378723d7620482d632a0bcaedb0826bbdfbbd300be2161dc5a5f6c226c62017

5.2.3668.0 · C:\WINDOWS\SysWOW64\newdev.exe · signed by Microsoft Windows

ff5c20b5a87f5083f56919e2b114a55d1c09f6285f67f07df94532ad46fee609

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.