CmdID

CmdID / Files

FXSCOVER.exe

Microsoft Fax Cover Page Editor file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real FXSCOVER.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Fax Cover Page Editor

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\FXSCOVER.exe · signed by Microsoft Windows

45ac6d507dc78d9ca66adefa91f8f1807f1f06c1b5933b8eb16202724401305a

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\FXSCOVER.exe · signed by Microsoft Windows

40e8e6dabfa1485b11cdccf220eb86eeaa8256e99e344cf2b2098d4cdb788a31

10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\FXSCOVER.exe · signed by Microsoft Windows

2c4a4b206e941e938e2fa93b2d034432dd4c040293f933bc1eec9dc539e83ec9

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\FXSCOVER.exe · signed by Microsoft Windows

02270c92bbc0adf709c668973e18ab78777f3e28dfffe8b118e8c5502430f305

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\FXSCOVER.exe · signed by Microsoft Windows

bd9cebf2c7cd550e96ca402dae912f9ce6b70e29c6f2e0d0ddfe825b8f52355e

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\FXSCOVER.exe · signed by Microsoft Windows

b38e19ebdad15526cf8305059b53dfaa2f277eae2e46edf787f84d637cca9170

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.