CmdID

CmdID / Files

bdechangepin.exe

BitLocker Drive Encryption: PIN Change Tool file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real bdechangepin.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionBitLocker Drive Encryption: PIN Change Tool

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\bdechangepin.exe · signed by Microsoft Windows

41bb758697ae8ccc2aa21e58535e2d754f5a491ead6d38ec27a3a1d06757e149

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\bdechangepin.exe · signed by Microsoft Windows

4d43f37576a0ebbaf97024cd5597d968ffe59c871b483554aea302dccb7253f6

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\bdechangepin.exe · signed by Microsoft Windows

7205e5645c6cae8cdfd337638b55532260bd0cd6fece68ef62c26312b69a7d3f

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\bdechangepin.exe · signed by Microsoft Windows

b6d905244de5f8b472f2c1528ff87674e6c397a2d4522cf340f7b8e538261dc6

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\bdechangepin.exe · signed by Microsoft Windows

31dc9f0d65fe9c35f43729b67c967ad4baf243f5a61f8e57c425d2029d8594d4

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\bdechangepin.exe · signed by Microsoft Windows

d95a9fc4ed07a68f0bfa47d46da7e5a4e22021312b7b86672f2a1f8094ad368f

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\bdechangepin.exe · not signed

d23968e79e161701e4d6c835b18c3137588cb3c7187c0e2adc9313e223752c76

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.