CmdID

CmdID / Files

AppleSyncMapiInterfaceHelper_x64.exe

SyncMapiInterfaceHelper file version info

Program on Windows 2 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real AppleSyncMapiInterfaceHelper_x64.exe?

file version info and known copies
Original nameAppleSyncMapiInterfaceHelper.exe in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Common Files\Apple\Mobile Device Support\
Signed byApple Inc.
DescriptionSyncMapiInterfaceHelper

2 known copies

38.0.0.53 · C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncMapiInterfaceHelper_x64.exe · signed by Apple Inc.

0db6cdf58dc611d983ceec56d9ea13db0f7b2d43369d99a31766671810b66168

38.0.0.44 · C:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleSyncMapiInterfaceHelper_x64.exe · signed by Apple Inc.

f5191ef2614e0ae51a6242e5b26a5e632944281b11d1352315309acbf91ba9d7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.