CmdID

CmdID / Files

MSOSREC.EXE

Microsoft Office Screen Recorder file version info

Program on Windows 1 known copy with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real MSOSREC.EXE?

file version info and known copies
Installed inC:\Program Files (x86)\Microsoft Office\root\Office16\
Signed byMicrosoft Corporation
ProductMicrosoft Office, Microsoft Corporation
DescriptionMicrosoft Office Screen Recorder

1 known copy

16.0.12527.20482 · C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSREC.EXE · signed by Microsoft Corporation

d1428030573e13499bef60bddf0f00c07a99c4b9bef336db63a7a967907dcbe0

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.