convertvhd.exe
VHD Conversion Tool file version info
Program on Windows 6 known copies with hashes
Is it the real convertvhd.exe?
C:\Windows\system32\6 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\convertvhd.exe · signed by Microsoft Windows
3a4baa2f4fc959d54012d0b4b90869e5dadd37cf6e1a90127047030f7c5ed92910.0.19041.546 (WinBuild.160101.0800) · C:\Windows\system32\convertvhd.exe · signed by Microsoft Windows
ba2bdca7835c6cd58700f2c50e8b2054a916c194bc2a4807c53a6d7b5d8b625f10.0.19041.1266 (WinBuild.160101.0800) · C:\Windows\system32\convertvhd.exe · signed by Microsoft Windows
2ef85e4043fc8ffa5dbc5f852989bfd7dba67722821008ec730d7079014da49f10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\convertvhd.exe · signed by Microsoft Windows
7fdd6cdcafc46ccd05ff0ac251c934ca9ee05706f7364a30eb1c3b41f516003110.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\convertvhd.exe · signed by Microsoft Windows
31e67c71ab9da82a6a881d72749dbaae6269464f2b01ad04c02b07998567fc4a10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\convertvhd.exe · signed by Microsoft Windows
3dcd82b2b87f8b6deb6f88aa41692d4fbde2d887c3be177d62bdda8ab74eb917From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.