CmdID

CmdID / Files

sacsess.exe

Microsoft SAC Service Helper file version info

Program on Windows 3 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real sacsess.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft SAC Service Helper

3 known copies

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\sacsess.exe · signed by Microsoft Windows

4bcc833d4262ab483da3273d4af1f86cdd7c43ea7b41580dd53958e6287cd6b7

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\sacsess.exe · signed by Microsoft Windows

a1a9a88a848cd94834a95ed84f97325c3c89020b837cddd32730db1707dc7c53

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\sacsess.exe · not signed

c8a56a8288d2326fdbd47788820d501c5c74c211e3da8f5f2669ce06e213aed7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.