CmdID

CmdID / Files

systray.exe

Systray .exe stub file version info

Program on Windows 12 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real systray.exe?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSystray .exe stub

12 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\systray.exe · signed by Microsoft Windows

76e8720e78c4934a9568b701cd5b81d0580445ddc4e2d9ceb1c1c37984f70c6c

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\systray.exe · signed by Microsoft Windows

aaab254dd9d005b4f5c70547d6faf02b038dadb98e4d3e955bae224373d97d10

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\systray.exe · signed by Microsoft Windows

853aba88579dfe2d5a9c4f614bb68983f3989db621c9181f235cd79103e9b2ab

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\systray.exe · signed by Microsoft Windows

b1a7169522d690dbe3ad77604913637dc457c4885ebedbddfb1419b366099204

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\systray.exe · signed by Microsoft Windows

0b973d551f19d8435b1450ac63589c8ebf15a8807a89ce85e39eeccd8b7867b7

10.0.18362.1 (WinBuild.160101.0800) · C:\WINDOWS\SysWOW64\systray.exe · signed by Microsoft Windows

731110739b3b44e42aa1d73e0da534bab12d84e87bede83fc7604fa801f8f4ea

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\systray.exe · signed by Microsoft Windows

14ad2e29fea1ed57dfaacaaf35757737baf5eca340ac302b30bb75a8a2bc412e

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\systray.exe · signed by Microsoft Windows

3386b848e8218274a91d56cfcf95caa5a641ed9b82db1a9c686e22ce0c42a649

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\SysWOW64\systray.exe · signed by Microsoft Windows

17fd1428a7358abe563b71dc68d44c33c9f6ee033b6e0cbeb0ab9e3bc878d4dd

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\systray.exe · signed by Microsoft Windows

39c05b58135d06381cf15620acd5befede1190b8670876d517934225d510e95e

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\SysWOW64\systray.exe · not signed

59dbb842eb105b68f22d78ac200c7bd55aa12ea528e5c9c4ae6cb36c356e9505

6.3.9600.17415 (winblue_r4.141028-1500) · C:\windows\system32\systray.exe · not signed

5f665a7ef197a8d9dde2cff05cd92c84b55826179b92f5e5146d3085b9a617e5

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.