CmdID

CmdID / Files

syncutil.dll

Sync utilities for mail, contacts, calendar file version info

Library on Windows 2 known copies with hashes

Is it the real syncutil.dll?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSync utilities for mail, contacts, calendar

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\syncutil.dll · signed by Microsoft Windows

3bd5be568e2fcc9a03e569b0d47596e45e5160b30d7a08a68e4f2dde68721e7c

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\syncutil.dll · signed by Microsoft Windows

d35e211a61297b26d04cb5472fefe96ad505b7afa63133e3832af3f57eeeb114

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.