CmdID

CmdID / Files

ClipUp.exe

Client License Platform migration tool file version info

Program on Windows 8 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ClipUp.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionClient License Platform migration tool

8 known copies

10.0.22000.120 (WinBuild.160101.0800) · C:\WINDOWS\system32\ClipUp.exe · signed by Microsoft Windows

74170a784a59dbcdd76bfd44084306e5a48d6b72980771e9d65cc88c1a6dff52

10.0.19041.84 (WinBuild.160101.0800) · C:\Windows\system32\ClipUp.exe · signed by Microsoft Windows

6b5502bd71fc210cb75e9e4953f4cea21bbae7849b4a18095e5a51de7a0797fa

10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\ClipUp.exe · signed by Microsoft Windows

a8fd7dbf296bfd7117acbf844ed84b0db896524825d8a172c4d4c1272c8f4087

10.0.19041.1052 (WinBuild.160101.0800) · C:\Windows\system32\ClipUp.exe · signed by Microsoft Windows

976124d09be547f08e23b8cbb8116cd95146f9e0b366dd76963055a3bb0af2cb

10.0.18362.693 (WinBuild.160101.0800) · C:\WINDOWS\system32\ClipUp.exe · signed by Microsoft Windows

46467b4b06255db1494e855207703aa3c083689490b3f7e77169e2e3dc254ed8

10.0.17763.1432 (WinBuild.160101.0800) · C:\Windows\system32\ClipUp.exe · signed by Microsoft Windows

36b6c08c86514a332cbdde4b908ac0e045dd92309ef564debd3825ca55316cd2

10.0.17763.1075 (WinBuild.160101.0800) · C:\Windows\system32\ClipUp.exe · signed by Microsoft Windows

2b72661bdd723636a0523ab07a0c23de7aff2ec2147b5183bfe67b0ecf1941b2

10.0.14393.3503 (rs1_release.200131-0410) · C:\Windows\system32\ClipUp.exe · signed by Microsoft Windows

c2dd216fd13a31c5f273301b60f8dfc67f7b569e32008b95456756ac2fe2aac2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.