CmdID

CmdID / Files

CodeHelper.exe

CodeHelper file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real CodeHelper.exe?

file version info and known copies
Installed inC:\Program Files\Microsoft VS Code\resources\app\out\vs\platform\files\node\watcher\win32\
Signed byMicrosoft Corporation
ProductCodeHelper, Microsoft Corporation
DescriptionCodeHelper

3 known copies

1.0.0.0 · C:\Program Files\Microsoft VS Code\resources\app\out\vs\platform\files\node\watcher\win32\CodeHelper.exe · signed by Microsoft Corporation

195755a87a07f70ab7c58d51833b4315ffe35e5950e5ad1a5708a2ae2378e5e8

1.0.0.0 · C:\Program Files\Microsoft VS Code\resources\app\out\vs\platform\files\node\watcher\win32\CodeHelper.exe · signed by Microsoft Corporation

9cf4ad4f29381642a45c4cab2e251b8d1d65ca7fce69e3a514b66860611191f9

1.0.0.0 · C:\program files\Microsoft VS Code\resources\app\out\vs\platform\files\node\watcher\win32\CodeHelper.exe · signed by Microsoft Corporation

b368c7eeb2dd629da1723f96d692ab66a5aec90dd2b71be643785cbe70e8bb06

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.