CmdID

CmdID / Files

dstokenclean.exe

Data Sharing Service Maintenance Driver file version info

Program on Windows 5 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real dstokenclean.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionData Sharing Service Maintenance Driver

5 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\dstokenclean.exe · signed by Microsoft Windows

e04d273a8a6a32d14b8e740752a9b3963463a1034ed956668e6f77e09e6e14b2

10.0.19041.84 (WinBuild.160101.0800) · C:\Windows\system32\dstokenclean.exe · signed by Microsoft Windows

cd3bd705613b8cd0f25159b32adf38f73fd0b5bb9f384c08bde8214509e0d716

10.0.18362.657 (WinBuild.160101.0800) · C:\WINDOWS\system32\dstokenclean.exe · signed by Microsoft Windows

151b6e2b4b9c19096ae078ab7d113ab3a1c8f76ce268af16d75223e83e149545

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\dstokenclean.exe · signed by Microsoft Windows

066aeb24ec4007483edb2ac0893236069f463e598fc18ff5646b28d067a74f58

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\dstokenclean.exe · signed by Microsoft Windows

700f2dbf378f89bfd9c9378483be76012326d58f906e83b5996a289ec013c8cf

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.