CmdID

CmdID / Files

recdisc.exe

Microsoft Windows Repair Disc file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real recdisc.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Windows Repair Disc

4 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\recdisc.exe · signed by Microsoft Windows

655c90b2bae26bdec66f7d9deb0a5fe8cf919d394b94d15f0ea6b62862e4b4d2

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\recdisc.exe · signed by Microsoft Windows

0787b37cf197595b8149ffe3784f9c59eacde3616011f185513ff5c075a5ac4e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\recdisc.exe · signed by Microsoft Windows

b8e7c3191b077fcaf5768d8d995dd71098e1bd078719fb20d954bb19076435e7

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\recdisc.exe · signed by Microsoft Windows

8859cb4709c7d776d70d5d3d3b31f7460904a9d9a0be4b5dcd57817ef09cf440

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.