CmdID

CmdID / Files

systemreset.exe

System Reset for Windows file version info

Program on Windows 10 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real systemreset.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSystem Reset for Windows

10 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\systemreset.exe · signed by Microsoft Windows

4c77de739a540d2df52689d23c440b6baf348a70951e601b76f779ec790bde6c

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\systemreset.exe · signed by Microsoft Windows

9ac37ef94d9106b3deedc51473b879160fd079e0d757c0363d4c16fbd85d55c8

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\systemreset.exe · signed by Microsoft Windows

d2a488d18595bd4c0c324a99bf2746cb934adc4e4268938f1057933f614f083f

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\systemreset.exe · signed by Microsoft Windows

ddfcdb2aa1406df0f4ba57fe205af2393da7874ebb65708229996b8d850cb6d1

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\systemreset.exe · signed by Microsoft Windows

dfbbfe3794600ca6395f7e9d2617365799637bd308a12fbbe4cee75722ee0421

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\systemreset.exe · signed by Microsoft Windows

e0a8451c708c5b30a3b703f009fe68f7eb903359ab525bc86ff9303fcd68360a

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\systemreset.exe · signed by Microsoft Windows

6eff2032c29fe5c3ca4b694998c1a652a8014a88041f4361677bd9d89b300777

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\systemreset.exe · signed by Microsoft Windows

447983ccbeab5c0b7ded4badefd267ca0e5e7e3c0d85df3a501b4f1f304d72ea

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\systemreset.exe · signed by Microsoft Windows

d7203c53192bac31211a12fc1623ee75a28013184b29b98b2227a409ab7a2cb1

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\systemreset.exe · signed by Microsoft Windows

c0a1164b0c8a6a68dd7ed04de7a75dda248b9c47586cc5e336afc5871a4f067d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.