CmdID

CmdID / Files

bcdboot.exe

Bcdboot utility file version info

Program on Windows 9 known copies with hashes Command bcdboot

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real bcdboot.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionBcdboot utility

9 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\bcdboot.exe · signed by Microsoft Windows

cf3c4b42c8924f23a70c3e94e2d6189ce2da95674aff5d29e3ffdc8ab0c1255a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\bcdboot.exe · signed by Microsoft Windows

04a7284ad746597dda60589b07cf133c3a1cadf556e555aff4967cf5ec76a097

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\bcdboot.exe · signed by Microsoft Windows

340b7df12c0afc58708a5adba76e702613dee6c8c30399920efe72146e7e44d7

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\bcdboot.exe · signed by Microsoft Windows

53e98d3cde5e80c6709857f53083a89033b70a696e11424ffad91ace86b4eb2c

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\bcdboot.exe · signed by Microsoft Windows

57d1f9d55b2162a831c9f7c681a1616ee7e8e5091d2bc4873550a62afb0b24ad

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\bcdboot.exe · signed by Microsoft Windows

2b7a6693be12f9df7a56f5467911927438ebc0c06f979195536c942cbe6c2cce

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\bcdboot.exe · signed by Microsoft Windows

d8f1c8a9d019a9430366322d78d76d5647e30664e2d96b3a5fb87738d603d19b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\bcdboot.exe · signed by Microsoft Windows

6fce4d0e7a0c3a0d051efb61ca5ad1e30af75bcca01dcd42cd3f49a105f34ffe

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\bcdboot.exe · not signed

606923eb7a078bc6b038ac4d51c6647d50982203f9533886e5abd2763209d526

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.