CmdID

CmdID / Files

chkntfs.exe

NTFS Volume Maintenance Utility file version info

Program on Windows 12 known copies with hashes Command chkntfs

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real chkntfs.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNTFS Volume Maintenance Utility

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\chkntfs.exe · signed by Microsoft Windows

5885a9efa59d864d34b1cd361e025924318f786f8f6451885d9ac67a235c49ad

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\chkntfs.exe · signed by Microsoft Windows

6e383e528f896345ee9e45a247f66b0603ca30fd30a92a838dae263c97733b67

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\chkntfs.exe · signed by Microsoft Windows

a7e7965c36a54135bf192aa34ed32065c151691eecc5f5c17ffc1db2c767478a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\chkntfs.exe · signed by Microsoft Windows

b11778898a18c8a6a24af153743060e1569f443ad73943bc4292eda844c80e2e

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\chkntfs.exe · signed by Microsoft Windows

22c19a26966f581991d97d5d1cf8c4b7a9ec238dda70401830184b83584a493d

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\chkntfs.exe · signed by Microsoft Windows

5cdfe049512c014263b0ae9a3b7898f3222693576b0595c001db08d6ef24d5e1

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\chkntfs.exe · signed by Microsoft Windows

1f8a47270e85216da798516fb59c6c81f0daa33f3fcc2efc8dc88c5ef40fb360

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\chkntfs.exe · signed by Microsoft Windows

7f2c546ab66aa9aed47eead71170bda9db6d5ecd6cfdc0ce0a7bc80b92d157e8

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\chkntfs.exe · signed by Microsoft Windows

7a28895eb731af1d16941d3f1069e0733f1325edaa06516e4b64af7b9a19da56

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\chkntfs.exe · signed by Microsoft Windows

c5066d00e21f691f9716efa0a85386eb10af407011363b123dbb7386166339f0

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\chkntfs.exe · not signed

2ab0926859fe6dc6308afb90a55fd044641ec5b948d8f4bfd77c854b24670719

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\chkntfs.exe · not signed

e0b09ec52e8733fb6be9688478d2640ecaa5b091fca4b2f8cb0fd383f738d112

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.