CmdID

CmdID / Files

Elevator.exe

AIMP Access Rights Elevator file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real Elevator.exe?

file version info and known copies
Installed inC:\Program Files (x86)\AIMP3\
C:\Program Files (x86)\Winamp\
Signed byIP Izmaylov Artem Andreevich
ProductAIMP, AIMP DevTeam
DescriptionAIMP Access Rights Elevator

3 known copies

5,8,0,3660 · C:\Program Files (x86)\Winamp\elevator.exe · signed by Winamp SA

961144fc083132d5fcbafb87f69d0e3d5cd559f0e69c5692b10ec266f87259f9

4.70.2227.0 · C:\Program Files (x86)\AIMP3\Elevator.exe · signed by IP Izmaylov Artem Andreevich

63b73aa54561cd0320d3a6d977453e2388915dbdb3f09cce4c5f9c4ba6a1b55f

4.70.2224.0 · C:\program files (x86)\AIMP3\Elevator.exe · signed by IP Izmaylov Artem Andreevich

3b1d02a3caf0bc5f411a151d3c578244d98addf269d23be0b0c082c2a73dd3a9

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.