CmdID

CmdID / Files

TSWbPrxy.exe

Microsoft Remote Desktop Services Web Proxy file version info

Program on Windows 7 known copies with hashes

Opens CmdID with your command. It is read in your browser and sent nowhere.

Is it the real TSWbPrxy.exe?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Remote Desktop Services Web Proxy

7 known copies

10.0.22000.1 (WinBuild.160101.0800) · C:\WINDOWS\system32\TSWbPrxy.exe · signed by Microsoft Windows

054b4e535eba52fecfaf2e95b93befcd62ced6d64db12b0ead84e0b8f77d671f

10.0.19041.746 (WinBuild.160101.0800) · C:\Windows\system32\TSWbPrxy.exe · signed by Microsoft Windows

6e118b779673183850a0acb474efa30bc4e91d47925aee5311364112d660e4ee

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\TSWbPrxy.exe · signed by Microsoft Windows

a0d6f924564f662d584d3c24c4eb50ea8607b8f8d8816550aad3ecdd87dbe34d

10.0.18362.836 (WinBuild.160101.0800) · C:\WINDOWS\system32\TSWbPrxy.exe · signed by Microsoft Windows

667427904e1612566a669428f9f35525ae4e8cf11b80646bd8a49c367849db2e

10.0.17763.1 (WinBuild.160101.0800) · C:\Windows\system32\TSWbPrxy.exe · signed by Microsoft Windows

8c4eb1cfb1a741d23f4598218ffe3654ddc8e02485d718a823c24a7c7e899401

10.0.14393.0 (rs1_release.160715-1616) · C:\Windows\system32\TSWbPrxy.exe · signed by Microsoft Windows

0c843656915e64450412b2bce6d96ba96a9ffd0ef22cfa8f54a7a75fb1fb4e49

6.3.9600.17555 (winblue_r6.141211-1500) · C:\windows\system32\TSWbPrxy.exe · not signed

10756491f3aa754f8b76af96f33a597826785f8d441d75abdc2fa74e7073ce6c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.