CmdID

CmdID / Files

fc.exe

DOS 5 File Compare Utility file version info

Program on Windows 12 known copies with hashes Command fc

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real fc.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDOS 5 File Compare Utility

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\fc.exe · signed by Microsoft Windows

75219d57a31bbbdb097e56ed576050170ffcc46a083d5c617115c4f5cdbf3b90

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\fc.exe · signed by Microsoft Windows

f8a6d5aa1c0cc58f01a3a6bbac59e6e54b4e502f27bbbb2a937e2ee39b625a44

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\fc.exe · signed by Microsoft Windows

9c52bfd3c2efd9dbc031112359f4f8c4b002b4c829d70862be100d17710dac01

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\fc.exe · signed by Microsoft Windows

c5b2fff1230c5cb4b7e62df2abdf65df25822e70d68d27a9a390016a3c3d5c04

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\fc.exe · signed by Microsoft Windows

93a1a05e2c8905f426fec414136803d07314d80b145257ab42cf52786b8cc12d

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\fc.exe · signed by Microsoft Windows

c95ab18de3de1a872ccbf7aa9955a146d58f81e6d5369cec97cc5704123bb60a

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\fc.exe · signed by Microsoft Windows

953bcc35710ed410212bd56cdea2e25fd9bc013707df17cb203e102a4f9c05da

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\fc.exe · signed by Microsoft Windows

f22b3505d734e3733b39072664262ea84f8ef7faa09cb3a4c1d589785d115ec1

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\fc.exe · signed by Microsoft Windows

05fcdfc453f3a16e0683d52485f1428e0b3ab8557e201b23b828ed9e2c749421

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\fc.exe · signed by Microsoft Windows

fd9e665c2cb62778a6e7ab2c9f3b78700f8c6e16b0555e3ae1e73f3996a23f07

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\fc.exe · not signed

43448f34d3ba3f5e71f4bf061ce3e0ec03957b257df529a6a26fa5ec20374bc5

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\fc.exe · not signed

9914e9e7d4060556b78ebbe3ffd190b6c3d5d37f0cbfeaa95430cbc0d99488ef

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.