manage-bde.exe
BitLocker Drive Encryption: Configuration Tool file version info
Program on Windows 5 known copies with hashes Command manage-bde
Is it the real manage-bde.exe?
C:\Windows\system32\5 known copies
10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\manage-bde.exe · signed by Microsoft Windows
7f0315bdc3d6c92142fa5118538779b9749073335044a94e5c173dea3858715a10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\manage-bde.exe · signed by Microsoft Windows
38f20a75e04bb9a53c563152a90a5b29ab689aff58d6abd3e005d156ee4e4c7310.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\manage-bde.exe · signed by Microsoft Windows
7c4d5e3ce3b97ebf2533c8529789ee4b1fcb846c95d21dcc9ec87eb1309a5bc910.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\manage-bde.exe · signed by Microsoft Windows
5be37eab49ceee5c5245fd7c002672b0540c8f27af74bb98e4cd109418b761506.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\manage-bde.exe · not signed
cb4b9af3f8127e7a7bc7f5364cc8aef9e2315cc153bb651abd2e8a9cbfbfd65aFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.