wstracedumpresources.dll

Windows Web Services API Trace Viewer Tool Resources file version info

Library on Windows 3 known copies with hashes

Is it the real wstracedumpresources.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\1033\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\1033\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\1033\

Signed byMicrosoft Corporation

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionWindows Web Services API Trace Viewer Tool Resources

3 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\1033\wstracedumpresources.dll · signed by Microsoft Corporation

4c5f9d67ef45fef948446046b1c40ad7b8c9557efbcddb830887dd90c9b5e5b6

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\1033\wstracedumpresources.dll · signed by Microsoft Corporation

c188bf620559652e31df52d8e8632014b74f3916df1998675827fd901b551aa7

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\1033\wstracedumpresources.dll · signed by Microsoft Windows Kits Publisher

c97f24732e66812dc413e4058b0459d24326eea91c236f4e58fb5a5579e64d8f

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.