CmdID

CmdID / Files

SystemPropertiesHardware.exe

Hardware Settings file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real SystemPropertiesHardware.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionHardware Settings

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SystemPropertiesHardware.exe · signed by Microsoft Windows

71b91c653b68e6d8ce15983e37f17f6bcf4d334b4d1792e9f896becb51b033e3

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SystemPropertiesHardware.exe · signed by Microsoft Windows

e942fce6b223b5c03f9668a3fb4646b127c4305e2782a75983c0000fe5b23c73

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SystemPropertiesHardware.exe · signed by Microsoft Windows

803db9536d3b097d4cd99f9d218e9327ec0f1e0683f1399f701f35bce423ffcc

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\SystemPropertiesHardware.exe · signed by Microsoft Windows

c8ebd920399ebcf3ab72bd325b71a6b4c6119dfecea03f25059a920c4d32acc7

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\SystemPropertiesHardware.exe · signed by Microsoft Windows

49fa1f8fd0e838d49e301305b128c5b07dbecf93bf22a4693208856dd6579c01

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\SystemPropertiesHardware.exe · signed by Microsoft Windows

564d9526aa960cee54ab9696c4fcd0b94251e6c1c540fdb7cf27ec1da15f00ee

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\SystemPropertiesHardware.exe · signed by Microsoft Windows

e15ad3001ac462da9bdd9510f85e19fb0397c4d467c16db1067ffc72e9ee8dc6

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\SystemPropertiesHardware.exe · signed by Microsoft Windows

eb71926b0f0f8b48f831c9589fad0f355f4e2a311f034c951a39de396fb552b9

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\SystemPropertiesHardware.exe · signed by Microsoft Windows

7843f95918df04885fe9cb9365fc3596b088b38c05cdefec3f344db46218157b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\SystemPropertiesHardware.exe · signed by Microsoft Windows

addbf29a0411e4467d90ddf395c81550e0ff72df8a6b8cd8272b6b1bcabe7cfe

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\SystemPropertiesHardware.exe · not signed

0a4c536ec370abc68fe55997d0fd48c16cab925ccd1f05e8be03f2a98abce1a7

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\SystemPropertiesHardware.exe · not signed

1c2bbedce3632b35c54a5407b742f5c94fe1d92c7de7427a88c9c87aa05514e7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.