CmdID

CmdID / Files

sxstrace.exe

Sxs Tracing Tool file version info

Program on Windows 16 known copies with hashes Command sxstrace

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real sxstrace.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSxs Tracing Tool

16 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\sxstrace.exe · signed by Microsoft Windows

6b0fbf9b04abcd62953d5dddf1a182cd22e54e7c92c12b8b82ba2c9c1e98be84

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\sxstrace.exe · signed by Microsoft Windows

9039a4f890e096cc0910478f0ecea72d1de33bf564f3380569a1892ec9e77c17

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\sxstrace.exe · signed by Microsoft Windows

1b6dbe28bb0fa4d8c1534a91b6a43d42b3e3b0c42ce4635e1dc609d739b15292

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\sxstrace.exe · signed by Microsoft Windows

2693a1363b8b9be2bc04e248a4d0b0962bb2138a52100f78bae111154e8363b4

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\sxstrace.exe · signed by Microsoft Windows

4c1283e3538bf2299b62d0c18440c242822775658ba0a9addda2133cf2f16cb0

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\sxstrace.exe · signed by Microsoft Windows

507f57022283b8d40ad1d3a075fced8a0ebd830cf433736c0559d0b10b77292e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\sxstrace.exe · signed by Microsoft Windows

55e0805f0beb5d8d1b395a9000599ced21a8cc9b824f2a2fa4ceec0dcfa88d8b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\sxstrace.exe · signed by Microsoft Windows

5bca119bcda248f6dca945a755c0a072fbfda8776774eb53035691c8385aba0c

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\sxstrace.exe · signed by Microsoft Windows

1b43a4d409bc32f8f409279de6eb4d86710afd4a4d44536d92e0ed1a19c2caeb

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\sxstrace.exe · signed by Microsoft Windows

3df15ef34799831e1c9b1989a1cab7b055532009e32b804e75020e23abe90b15

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\sxstrace.exe · signed by Microsoft Windows

3325883fd89108dd698638098cd9dfa14a2a75fd5fa812bdfd69be23f5ca4c3d

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\sxstrace.exe · signed by Microsoft Windows

85bdd568fedc81b48fe18f5c4b2e2799aceac8049f6f36a42e5a7868e83de938

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\sxstrace.exe · signed by Microsoft Windows

38684e6d8e792dda1b5b953a6c34a8b2ec503b7f10acaa31bdc4fe162c088e88

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\sxstrace.exe · signed by Microsoft Windows

e79f546fe88776b5c16b5e8baa9f578aaf1cadb393b2197ff2d6b23cdec0cd45

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\system32\sxstrace.exe · not signed

41036cf40df225e265e8d64879a37751a6b1acb1bda7814c835c06d7c68b17d2

6.3.9600.16384 (winblue_rtm.130821-1623) · C:\windows\SysWOW64\sxstrace.exe · not signed

cd1eb2bfba4f7ced178a1dfe059b36f6e09e7a12f6f765d10d8c827fec1f4849

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.