CmdID

CmdID / Files

ls.exe

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real ls.exe?

file version info and known copies
Installed inC:\Users\user\AppData\Local\GitHubDesktop\app-2.5.3\resources\app\git\usr\bin\
C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\
Signed byGitHub

2 known copies

Version not recorded · C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\ls.exe · signed by GitHub

4d2ded397b541812a623b229be7c8b7621e00e56233e259f4ccce79df3a8cbcf

Version not recorded · C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.3\resources\app\git\usr\bin\ls.exe · signed by GitHub

73eb19f9517506370a4da3dd9b7ce625d140b45bad0ba2bb878a87969b5220fc

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.