CmdID

CmdID / Files

IESettingSync.exe

Microsoft IE Setting Sync Background Application file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real IESettingSync.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductIESettingSync, Microsoft Corporation
DescriptionMicrosoft IE Setting Sync Background Application

7 known copies

11.00.22000.282 (WinBuild.160101.0800) · C:\WINDOWS\system32\IESettingSync.exe · signed by Microsoft Windows

8aed462cdbb7bba562dc23c9549fb975245a423264aa1104fdf0488524998e54

11.00.19041.662 (WinBuild.160101.0800) · C:\Windows\system32\IESettingSync.exe · signed by Microsoft Windows

11f2b82bc9e075c120422477e114a53dc46e1a5058027e36e8ed81a4c55cafa5

11.00.19041.610 (WinBuild.160101.0800) · C:\Windows\system32\IESettingSync.exe · signed by Microsoft Windows

0af12c71e0dfe450efbe6464f19430e2c9aa48b5729ab558817ac71e3050a68d

11.00.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\IESettingSync.exe · signed by Microsoft Windows

2bbe159d0c14f6faed57366978da8583fbb2ba449bd9cff1f40a3ab38a11df46

11.00.19041.423 (WinBuild.160101.0800) · C:\Windows\system32\IESettingSync.exe · signed by Microsoft Windows

6002aae528d7b25106bc5b07791e6980000f49e356756d3dc4aebdc38f4ee0e6

11.00.19041.329 (WinBuild.160101.0800) · C:\Windows\system32\IESettingSync.exe · signed by Microsoft Windows

8ed529346594977d27fa52696a2b788c0a0fa3a0e5f630cefff637c133de9258

11.00.19041.1320 (WinBuild.160101.0800) · C:\Windows\system32\IESettingSync.exe · signed by Microsoft Windows

d81c58ae51533ede788a9092b9438efc2786fad5746ded3e6e794916922df2d2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.