CmdID

CmdID / Files

wiaacmgr.exe

Windows Picture Acquisition Wizard file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real wiaacmgr.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Picture Acquisition Wizard

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\wiaacmgr.exe · signed by Microsoft Windows

0ec399870b9ca6ae6c3927c3508632da593dced941f5e0fdc3d04d40908f5a83

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\wiaacmgr.exe · signed by Microsoft Windows

193781ef333f46813692dc9d407729f6c45daf84971c1ed61fee8142f24d868d

10.0.19041.1151 (WinBuild.160101.0800) · C:\Windows\SysWOW64\wiaacmgr.exe · signed by Microsoft Windows

c669de1e276c6bf578745d48b948506cd0a0fc2066a24750b7d445e7e733eb71

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wiaacmgr.exe · signed by Microsoft Windows

0d6ec5f3ba580eda62d033c7554711128bc67d89890470191ee21b210f029927

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\wiaacmgr.exe · signed by Microsoft Windows

446cf796101f82c546ebe0f4d82ac2110781d9dcb7ef617464e16fd042812d5f

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\wiaacmgr.exe · signed by Microsoft Windows

8e1f055cbc375865d0fe2f97186fa66f916594996720cc4627d8d47e1d86e732

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\wiaacmgr.exe · signed by Microsoft Windows

0d5b207bf6aa6e1bec54ca3aee09fb21ce65c8b4152e9c9a3fc53928c2c84b12

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\wiaacmgr.exe · signed by Microsoft Windows

8ca29cc53dd8d6c5d508c1f46b6ceddda0e46188ecede14e1b49f81dc40f0b58

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\wiaacmgr.exe · signed by Microsoft Windows

90168783dbd9ac5cb2899297154b871ff50e218cd4c825fbb60668cae4463144

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\wiaacmgr.exe · signed by Microsoft Windows

c485b377a3982a890b91f71495b1d74b7e0244d8b571800d462bfa051b0bf6c3

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\wiaacmgr.exe · signed by Microsoft Windows

4872eede2f779309fbfd1de7c60a7c176b4248a04914c7dd6833f522f72076be

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\wiaacmgr.exe · signed by Microsoft Windows

55bb4f8b8e6b81764bd96f04186f0badaf5ca42b9404bee14277c5d42053a46b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.