CmdID

CmdID / Files

tzsync.exe

TimeZone Sync Task file version info

Program on Windows 6 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real tzsync.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionTimeZone Sync Task

6 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\tzsync.exe · signed by Microsoft Windows

43c8498dc3771fde09b868e7478cb95a5a4eca18cfe80e9ab7372647dd2c6282

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\tzsync.exe · signed by Microsoft Windows

3c4de3f013d4611bbdb14ea17207e4d93eb406e14e639b1d87ce217c96747cf2

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\tzsync.exe · signed by Microsoft Windows

cc2a37eef0d031a87bad220a6e9615e5f68b13e2311dd54560a9bf94bd0dcccc

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\tzsync.exe · signed by Microsoft Windows

26a12639ef4893a2a9fb3970661956b21c500b8a61d8b07dde53100a17970559

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\tzsync.exe · signed by Microsoft Windows

2859635febcc5c38470828daaecff49179716addfc5ad9fadeb89722842b381a

6.3.9600.17931 (winblue_ltsb.150710-0600) · C:\windows\system32\tzsync.exe · not signed

56c7926c9658f915b115e99b02fc3ac710e472af2f65305d1c99a13fe316e2f8

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.