CmdID

CmdID / Files

BdeHdCfg.exe

BitLocker Drive Encryption: Drive Preparation Tool file version info

Program on Windows 5 known copies with hashes Command bdehdcfg

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real BdeHdCfg.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionBitLocker Drive Encryption: Drive Preparation Tool

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\BdeHdCfg.exe · signed by Microsoft Windows

dcbe69e00c308bb747f2a7a6635aacaf167945c5bcc3e02c8aef5edf33f8985d

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\BdeHdCfg.exe · signed by Microsoft Windows

a6797c873af8f7fefe1352876113cd912e329759e838cf2f49ecd7bdf4bf4f26

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\BdeHdCfg.exe · signed by Microsoft Windows

b513a5cff54702917de47adc85e717bad75ada41967253a55fb928365df2e020

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\BdeHdCfg.exe · signed by Microsoft Windows

24d5ae729dba94c00615c3c13a5fc0707912f991353f9db826ab03ee066766a6

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\BdeHdCfg.exe · not signed

af5efbfb05eaf46626efb8dbfd8bd1a878a224e2c12438d26b6b88aad764939e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.