CmdID

CmdID / Files

msfeedssync.exe

Microsoft Feeds Synchronization file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real msfeedssync.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductInternet Explorer, Microsoft Corporation
DescriptionMicrosoft Feeds Synchronization

12 known copies

11.00.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\msfeedssync.exe · signed by Microsoft Windows

69f37bf40252d57503141850994488f29a6617e0ac41dc7472074b3cdfea7152

11.00.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\msfeedssync.exe · signed by Microsoft Windows

ace3ddc22727ffd9ba00c9dc870c4924bdd1c8faffc7d51e69c96ac3c74ae5c3

11.00.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\msfeedssync.exe · signed by Microsoft Windows

73cd7e458475e0a83cde7faa3982fcd341a6b6c4afab33e4950bccd15635eadf

11.00.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\msfeedssync.exe · signed by Microsoft Windows

d842c0aa333567d6b14a5f7429282652917a10b449bbab8a79d7f4c4821a5d9f

11.00.18362.628 (WinBuild.160101.0800) · C:\WINDOWS\system32\msfeedssync.exe · signed by Microsoft Windows

12e767e5352dae0e9396da53ffd7c508dd0ff6e83d5ae141db282040997d59f4

11.00.18362.628 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\msfeedssync.exe · signed by Microsoft Windows

1534277ee7882c36aec98d51242fcbe36c156cba597309f4800b11f7e5d23895

11.00.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\msfeedssync.exe · signed by Microsoft Windows

ce95233922882f70354d637b12f4738042e189f9a92f4e99945fcbf84ec611f7

11.00.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\msfeedssync.exe · signed by Microsoft Windows

ff2144014012a9bdeb2f2e1775ba18ea0810cfa2771cfdc9bc075a2e3716c219

11.00.14393.2007 (rs1_release.171231-1800) · C:\Windows\system32\msfeedssync.exe · signed by Microsoft Windows

3fc5fe27c7374a491bab62bf59d807183ebde91572b0cbb85ba21f67898f48dd

11.00.14393.2007 (rs1_release.171231-1800) · C:\Windows\SysWOW64\msfeedssync.exe · signed by Microsoft Windows

fd59287016484269c5cdac276a8bef22cb03238b71ed2b5b4e0e234f31909d56

11.00.9600.17416 (winblue_r4.141030-1500) · C:\windows\SysWOW64\msfeedssync.exe · not signed

09734ddb11a0beeee5e37a6d2f9fe24b1b09a8a0f5d25db666084671a1d35c26

11.00.9600.17416 (winblue_r4.141030-1500) · C:\windows\system32\msfeedssync.exe · not signed

efdc52da3624c831447403a0bd3e6914eb0fd545b2f969b18f908953def3757c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.