wstraceutilresources.dll

Windows Web Services API Trace Utility Tool Resources file version info

Library on Windows 4 known copies with hashes

Is it the real wstraceutilresources.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\1033\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\1033\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\1033\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionWindows Web Services API Trace Utility Tool Resources

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\1033\wstraceutilresources.dll · signed by Microsoft Corporation

4e4e76f1388293860e3517e78325f411da4a71cfa3248985818a5259d627b275

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\1033\wstraceutilresources.dll · signed by Microsoft Corporation

5d51b2560d7c966c878f4adde66226a6a6ef60900db5dcf1d040366322c95c7a

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\1033\wstraceutilresources.dll · signed by Microsoft Windows Kits Publisher

d2af99097e48ab08c153d4aaa1e600cfe38e90bc27c991d825cdb42d54286620

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\1033\wstraceutilresources.dll · signed by Microsoft Windows Kits Publisher

dadca636e4203289dfdb13e606ddd2c38e8e1f48ab488a8dd8bf255c61670af4

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.