Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	2.78%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	2.78%
6.1.7601.17514 (win7sp1_rtm.101119-1850)	2.78%
6.1.7600.16385 (win7_rtm.090713-1255)	2.78%
6.0.6001.18000 (longhorn_rtm.080118-1840)	52.78%
6.0.6001.18000 (longhorn_rtm.080118-1840)	5.56%
5.1.2600.5512 (xpsp.080413-2108)	27.78%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	2.78%

Relationships

Parent process

svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Related files

synccenter.dll (Microsoft Sync Center by Microsoft)

PE file structure

Show functions

Import table

advapi32.dll

TraceMessage, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, RegisterTraceGuidsW, UnregisterTraceGuids, RegEnumValueW, RegQueryInfoKeyW, RegCloseKey, RegOpenKeyExW

kernel32.dll

LocalAlloc, LocalFree, HeapSetInformation, GetCommandLineW, DelayLoadFailureHook, GetProcAddress, GetLastError, FreeLibrary, InterlockedCompareExchange, LoadLibraryExA, RegOpenKeyExW, lstrlenW, RegEnumValueW, RegQueryInfoKeyW, RegCloseKey, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetSystemTimeAsFileTime, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, GetStartupInfoW, Sleep, InterlockedExchange, LoadLibraryA

msvcrt.dll

DllMain

ole32.dll

CoUninitialize, CoCreateInstance, CoInitializeEx

shell32.dll

CommandLineToArgvW

user32.dll

TranslateMessage, GetMessageW, DispatchMessageW

mobsync.exe

Microsoft Sync Center by Microsoft

Remove mobsync.exe

Version:	6.1.7601.17514 (win7sp1_rtm.101119-1850)
MD5:	cca67bd391cfc9f036323b2522887a6a
SHA1:	02a887df2f485a19a051af0f3d01dac006dd9a83
SHA256:	79f5bc1ad13a5575a52d39a000d0873b31865659b5efc66a7fef5e43e54c38b9

This is a Windows system installed file with Windows File Protection (WFP) enabled.

What is mobsync.exe?

Sync Center allows you to check the results of your recent sync activity if you've set up your computer to sync files with a network server. This allows you to access copies of your network files even when your computer isn't connected to the network. Sync Center can tell you if the files synced successfully or if there are any sync errors or warnings.

About mobsync.exe (from Microsoft)

“Sync Center is designed to help you sync with files in network locations. If you want to sync a mobile device with your computer, such as a mobile phone or portable music player, Windows gives you sev”

Details

File name:	mobsync.exe
Publisher:	Microsoft Corporation
Product name:	Microsoft Sync Center
Description:	Microsoft® Windows® Operating System
Typical file path:	C:\Windows\System32\mobsync.exe
File version:	6.1.7601.17514 (win7sp1_rtm.101119-1850)
Product version:	6.1.7601.17514
Size:	99 KB (101,376 bytes)
Digital DNA
PE subsystem:	Windows GUI
Entropy:	7.302905
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Behaviors

Scheduled task

The job 'Offline Files Sync Schedule 1' in the path '\Microsoft\Windows\SyncCenter\S-1-5-21-2410419245-1546938604-1796181635-1001\{750FDF10-2A26-11D1-A3EA-080036587F03}\Offline Files Sync Schedule 1'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.31801340%	0.028634%
Kernel CPU:	0.31801340%	0.013761%
Kernel CPU time:	30 ms/min	100,923,805ms/min
Context switches:	11/sec	284/sec
Memory
Private memory:	1.36 MB	21.59 MB
Private (maximum):	5.23 MB
Private (minimum):	5.21 MB
Non-paged memory:	1.36 MB	21.59 MB
Virtual memory:	58.29 MB	140.96 MB
Virtual memory (peak):	62.59 MB	169.69 MB
Working set:	5.23 MB	18.61 MB
Working set (peak):	5.23 MB	37.95 MB
Resource allocations
Threads:	7	12
Handles:	134	600
GUI GDI count:	9	103
GUI GDI peak:	11	142
GUI USER count:	9	49
GUI USER peak:	10	71

Process properties

Integrety level:	Medium
Platform:	32-bit
Command line:	C:\Windows\System32\mobsync.exe -embedding
Owner:	User
Parent process:	svchost.exe (Host Process for Windows Services by Microsoft Corporation)

Threads