diskraid.exe
DiskRAID file version info
Program on Windows 8 known copies with hashes Command diskraid
Is it the real diskraid.exe?
C:\Windows\system32\C:\Windows\SysWOW64\8 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\diskraid.exe · signed by Microsoft Windows
201e6d102f8caee53313d4b2c5d00f4e2db304b6b220fd00c8c2108c8e5e821b10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\diskraid.exe · signed by Microsoft Windows
6f572bd4c5a0d9cdcaa2e63ff1b0e36982f4d35fa9fb9d360b2d8cc57fe4ee5410.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\diskraid.exe · signed by Microsoft Windows
162846c824209e7fb7fcc76ef44349ae830bac5a6748fd13656d7589fe8158df10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\diskraid.exe · signed by Microsoft Windows
7d4c3d063e8da3250b94a3c81edad89ed3ac218228ea177c3576590a42d027b610.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\diskraid.exe · signed by Microsoft Windows
2869ad08abbf55842992775b18dc1abbe98f0a2316cfa080c6f411010fd26cc210.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\diskraid.exe · signed by Microsoft Windows
7667fe2e4416321edf29b17de47e7de83e2c97f558f5581d50f85ede0f7fae346.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\diskraid.exe · not signed
9660b8602cb5da0078bce688752100f8b622aa2a0060fd926d280207506c63906.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\diskraid.exe · not signed
c9ffde0dfdf93941e4777682da7e57b41d55fcd23ac19c370f36d5dfd9b3c9dbFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.