CmdID

CmdID / Files

label.exe

Disk Label Utility file version info

Program on Windows 12 known copies with hashes Command label

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real label.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDisk Label Utility

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\label.exe · signed by Microsoft Windows

1b6ecbbc6a81ff26fad8c3805cfff9206cd17ce58bb3826520a751b09cb26000

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\label.exe · signed by Microsoft Windows

ec7ce686d1eaf97c2709a1c8bd98698f12b8e82d55751a9bb83f4d10fff016a0

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\label.exe · signed by Microsoft Windows

5b63cdaa6b386340186d48fca6687b51d666f4457c1d1228c4915bdd2917a315

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\label.exe · signed by Microsoft Windows

fd11a74c35a7713013474417c89c7dd61e7e3063119fbe655a759bee0f8731a2

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\label.exe · signed by Microsoft Windows

60bf3477aa95efc425674fe4fd88a3f311e6c23b50712ff42609a25a6a5b40d8

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\label.exe · signed by Microsoft Windows

68f18947db7b9e0ddfd840d039df793a4c07fa5bc00ca11e768fdf9d0d5b57c9

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\label.exe · signed by Microsoft Windows

332fa83bdc982ab5a509eff6fdac3161034bf55b32b7f7dc3c7551fe3a6a0cbc

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\label.exe · signed by Microsoft Windows

7bacc9fd1870a349740e7995ac1ba06fce69da50f7542902c23648fd52354e65

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\label.exe · signed by Microsoft Windows

5bb47ae58eeabad359b2911cb773c6d0af2c2027bc5d9097534f6c1e308e9ff3

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\label.exe · signed by Microsoft Windows

aae0e47a0da0ac548513de6a36d38ef6d798817b7911aa291e0d86c0a279a16e

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\label.exe · not signed

916981fa577f28db734f0f0ced5c50a1371b0654adde0f6f286b4a19c2924ab4

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\label.exe · not signed

9f81aac7e28de5cdcc60c2f7a3cd9ec4dae0658e59f46d89d6c3a99f14b3cfd9

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.