CmdID

CmdID / Files

windeploy.exe

Windows Deployment Loader file version info

Program on Windows 9 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real windeploy.exe?

file version info and known copies
Installed inC:\Windows\system32\oobe\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Deployment Loader

9 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\oobe\windeploy.exe · signed by Microsoft Windows

749739e0394472849f797dd0a29e6f5b2341c30a0af5b03377c1fa989e47ea15

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\oobe\windeploy.exe · signed by Microsoft Windows

1e4f948548f20d621900678718bf341ab92c637c07df5ec96fe4879a6b57206a

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\oobe\windeploy.exe · signed by Microsoft Windows

7a5b6006a6d75d3a29a53fea94ddced10fa016301f79685351310fe7f5761cf5

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\oobe\windeploy.exe · signed by Microsoft Windows

ebf0a6ca1d50f0d8b547d15bedb495cc3906137fd4597af1415cd2901f2fce1f

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\oobe\windeploy.exe · signed by Microsoft Windows

83cbe8b09895a7c612e3dacfdb3fc50ac3c9e6912806b3e548084939385795d4

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\oobe\windeploy.exe · signed by Microsoft Windows

2745fdc894649c718aa32358d155d7d674b0644fa34d7e37c8375090a0901a09

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\oobe\windeploy.exe · signed by Microsoft Windows

ed50056744b459a7de66275c152967fb4919105fefd51c96d018de2f68c1272b

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\oobe\windeploy.exe · signed by Microsoft Windows

7f2b457b53dd987674cc84ea6e947911b625314e13aabdef94175b2ff267398a

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\oobe\windeploy.exe · not signed

7c45a477b27643ed3f0bfb053792846c7761e31b58db2aa42f24971768d4694b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.