home

filetrace.sys

File Trace Filter Driver

Microsoft Corporation

It runs as a Windows 64-bit file system device driver named “Filetrace”. It is included with the Windows 7 OS.
Publisher:
Microsoft Corporation

Product:
Microsoft® Windows® Operating System

Description:
File Trace Filter Driver

 
Part of the Windows 7 Operating System

Version:
6.1.7600.16385 (win7_rtm.090713-1255)

MD5:
5f671ab5bc87eea04ec38a6cd5962a47

SHA-1:
066b447e9adfa567d5bde47503b7e739d2654498

SHA-256:
6b61d3363ff3f9c439bd51102c284972eae96acc0683b9dc7e12d25d0adc51b6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
9/16/2026 7:46:59 AM UTC  (today)

File size:
33.5 KB (34,304 bytes)

Product version:
6.1.7600.16385

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
filetrace.sys

File type:
Driver (Win64 SYS)

Language:
English (United States)

Common path:
C:\Windows\System32\drivers\filetrace.sys

File PE Metadata
Compilation timestamp:
7/13/2009 7:25:40 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Native (none required)

Linker version:
9.0

CTPH (ssdeep):
768:axps2oYCJcj6MzFpXyJrH04i3AJalgfD:6/q3k6di3fifD

Entry address:
0xB4C4

Entropy:
5.8206

Code size:
27.5 KB (28,160 bytes)

Driver
Display name:
Filetrace

Description:
@%SystemRoot%\system32\drivers\filetrace.sys,-10000

Type:
File system 'filter' driver (FileSystemDriver)

Group:
FSFilter Activity Monitor

Depends on:
FltMgr


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.