CmdID

CmdID / Files

pageant.exe

PuTTY SSH authentication agent file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real pageant.exe?

file version info and known copies
Original namePageant in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\WinSCP\PuTTY\
C:\Program Files\PuTTY\
Signed bySimon Tatham
ProductPuTTY suite, Simon Tatham
DescriptionPuTTY SSH authentication agent

4 known copies

Release 0.76 (without embedded help) · C:\Program Files (x86)\WinSCP\PuTTY\pageant.exe · signed by Simon Tatham

e9067bd344f49f37eaf33cb94f538477b4144ce658143265eb15e0b1b719c04d

Release 0.76 (without embedded help) · C:\Program Files\PuTTY\pageant.exe · signed by Simon Tatham

ebc939971acfe73beef881b950ead1ac8e7423113ceb924ce8a76629a14142c5

Release 0.74 (without embedded help) · C:\Program Files\PuTTY\pageant.exe · signed by Simon Tatham

9604481eaa44bd8f575329056286d1a7e2efc4268abb346a198d01f6123d48d8

Release 0.73 (without embedded help) · C:\Program Files (x86)\WinSCP\PuTTY\pageant.exe · signed by Simon Tatham

3504bb149e194dcc587af4b73fcad3cc1ea4344414059857848c179fc4fa698e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.