CmdID

CmdID / Files

XblGameSaveTask.exe

XblGameSave Standby Task file version info

Program on Windows 4 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real XblGameSaveTask.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionXblGameSave Standby Task

4 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\XblGameSaveTask.exe · signed by Microsoft Windows

2c3b57ad83697a870d652fd96459424ae5e219c61ba64604174ec421de3417d0

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\XblGameSaveTask.exe · signed by Microsoft Windows

a6f8b7e0547ace0d54485aa79fdc4c7c83ee9e363eb30e8e401cb57b4494619a

10.0.18362.836 (WinBuild.160101.0800) · C:\WINDOWS\system32\XblGameSaveTask.exe · signed by Microsoft Windows

133f5183b40c836eb086841c6a41f88b5e68787d4d39981bc9bc5174f3288bc4

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\XblGameSaveTask.exe · signed by Microsoft Windows

babfaee679e6005d49f7c314ba7fda93f31b447e8d799256ccbe8b07252b726a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.