CmdID

CmdID / Files

lsattr.exe

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real lsattr.exe?

file version info and known copies
Installed inC:\Users\user\AppData\Local\GitHubDesktop\app-2.5.3\resources\app\git\usr\bin\
C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\
Signed byGitHub

2 known copies

Version not recorded · C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.4\resources\app\git\usr\bin\lsattr.exe · signed by GitHub

cbfecf9f28b9e9ae97b48614f710e4c145b4dcf6abf2c0c0254e9825773cde93

Version not recorded · C:\Users\user\AppData\Local\GitHubDesktop\app-2.5.3\resources\app\git\usr\bin\lsattr.exe · signed by GitHub

e2b21b8d9bb26630c56a3e1ff77dd014e96212e49cd637463b061ff5c7bf120a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.