CmdID

CmdID / Files

cp.exe

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real cp.exe?

file version info and known copies
Installed inC:\Users\user\AppData\Local\GitHubDesktop\app-2.5.3\resources\app\git\usr\bin\
C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\
Signed byGitHub

2 known copies

Version not recorded · C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.3\resources\app\git\usr\bin\cp.exe · signed by GitHub

bfbe296989d4730c085a67c0e3451faeec9dd1581f5bec472245e408e1a576df

Version not recorded · C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\cp.exe · signed by GitHub

f3b8af9cda46749fd13cd9c5d91f33fa10519016571b6e9722bd23ce265382e0

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.