CmdID

CmdID / Files

BitLockerWizard.exe

BitLocker Drive Encryption Wizard file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real BitLockerWizard.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionBitLocker Drive Encryption Wizard

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\BitLockerWizard.exe · signed by Microsoft Windows

2c232584a40c742622b7600ebd7e9ddd1e739abfa1c17f7f96950d1cc4bc0a99

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\BitLockerWizard.exe · signed by Microsoft Windows

13302146579b36397d4b5e602f98b8474a65bdcc125e499fd0ff2eefd811c44b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\BitLockerWizard.exe · signed by Microsoft Windows

7758227642702e645af5e84d1c0e5690e07687c8209072a2c5f79379299edf74

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\BitLockerWizard.exe · signed by Microsoft Windows

55e42024de2eb71766fec591c9f1f4827b367c958fa9f28aa4a8b8d128fe1faf

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\BitLockerWizard.exe · signed by Microsoft Windows

d7da17404acb12c657aedc1ab1cc31a6ba168e055c9f179e26054c59c3df0a3f

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\BitLockerWizard.exe · not signed

64bd033fcda7dc68bf1d034b5285282d160a5d644cbe50aa0de09ec165dd1cfc

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.