chkdsk.exe
Check Disk Utility file version info
Program on Windows 12 known copies with hashes Command chkdsk
Is it the real chkdsk.exe?
C:\Windows\system32\C:\Windows\SysWOW64\12 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\chkdsk.exe · signed by Microsoft Windows
76331703a4d1f8e27d24b63d21b51f96066f955853e8eb25eb56c6667225fcad10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\chkdsk.exe · signed by Microsoft Windows
c0bff1abec9bac3287c0bd6f3e76d364095ec17a25ee9c8e9a98e6b46e019d6a10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\chkdsk.exe · signed by Microsoft Windows
1d5227595aeb4ff3ceeb620e94b5342955667eeacd000e2a4be748ad94583daf10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\chkdsk.exe · signed by Microsoft Windows
f3f0645ed6cf3421520787846a8d0f66367522b4ec2c34021a1a11373d22971210.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\chkdsk.exe · signed by Microsoft Windows
dc4342e019659403c44b1a04ebff93d5a816472d8f1dbed57efa3176e53b7fa110.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\chkdsk.exe · signed by Microsoft Windows
f6be94bdd0f6c02438c697f37c836d5ef2bf1690573953525db117e7d03251f110.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\chkdsk.exe · signed by Microsoft Windows
0883578668bf5aa07ba2c4cfd8b0ccfccdd048b8e741e5b3de0c03ac84a09d2e10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\chkdsk.exe · signed by Microsoft Windows
813c050393486b336e9e3f11742f600f2eb118656881f99d32463baedb512dba10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\chkdsk.exe · signed by Microsoft Windows
249ce8bfc6dfdb17cf87f97dc8f5541fafb75f8abdc9419364204ab8144e5e2910.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\chkdsk.exe · signed by Microsoft Windows
68f0fd913e8cbbcc0b70503ea86ee261614a460fbc0ccf46ae2f000b47fa5c696.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\chkdsk.exe · not signed
035a22149cfbb1415d293ad3c3664b2990191b0336d595e1564ec86ba7337da26.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\chkdsk.exe · not signed
721d2b78e576151975dd3e4a2612e983f3bdc7233b04940466f4cabf73da12d8From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.