CmdID

CmdID / Files

ResetEngine.exe

Push-Button Reset Engine file version info

Program on Windows 8 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ResetEngine.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPush-Button Reset Engine

8 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\ResetEngine.exe · signed by Microsoft Windows

2b96cb42ec4012ef5ae679ad6ab60e3e9b7c00d25d89aa33658f812904af4e2e

10.0.19041.630 (WinBuild.160101.0800) · C:\Windows\system32\ResetEngine.exe · signed by Microsoft Windows

e91de86c7be50a588effa24707b2efc4d51a7728c8d1db281f5334b34284ae67

10.0.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\ResetEngine.exe · signed by Microsoft Windows

16f7dfcc1ecdcc2783a031510d413edd98182a1bd117cb2dfeb2153768426ca5

10.0.19041.153 (WinBuild.160101.0800) · C:\Windows\system32\ResetEngine.exe · signed by Microsoft Windows

02f07d90d6881221de36e8471c393bb2cf6f4ae30343d4b28389fd3245844871

10.0.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\ResetEngine.exe · signed by Microsoft Windows

922c159e1669313d7dd1369445acb65677f4e0e3dc7abf51f23027f1ab7b7a6f

10.0.18362.719 (WinBuild.160101.0800) · C:\WINDOWS\system32\ResetEngine.exe · signed by Microsoft Windows

e6c414f0a3944ccf389951bfd998c9fdaf1fa4ee4208450eaeba7a86588d159d

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\ResetEngine.exe · signed by Microsoft Windows

cd4649748eef2d035b01039d1113dde1194e4608a3a0c665e8fa689c1cab7bfd

10.0.14393.82 (rs1_release.160805-1735) · C:\Windows\system32\ResetEngine.exe · signed by Microsoft Windows

0d8e3090c692bf22214d3c61b9a46dfbcbd4d8e0c749485009fe2ba3fe533e8c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.