CmdID

CmdID / Files

bootsect.exe

Boot Sector Manipulation Tool file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real bootsect.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionBoot Sector Manipulation Tool

3 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\bootsect.exe · signed by Microsoft Windows

216f86cd0e78a8f90de5ea8b6007daf0e7e57a0fb72aa3a0b68f6a775bb43aa1

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\bootsect.exe · signed by Microsoft Windows

2d7ce2dd4a9ce5fbed2c150720280cf50808b0cd5d7d988cdaaf5bd1e9e292f3

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\bootsect.exe · signed by Microsoft Windows

879332fe86ca885636a5ece7c5551b75eab93d0fad45d5d79f3d378b9149db48

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.