api-ms-win-core-console-l1-2-0.dll

ApiSet Stub DLL file version info

Library on Windows 4 known copies with hashes

Is it the real api-ms-win-core-console-l1-2-0.dll?

file version info and known copies

Original nameapisetstub in the file’s header: a renamed copy still carries it

Installed inC:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\arm\
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\
C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x86\

Signed byMicrosoft Corporation

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionApiSet Stub DLL

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-core-console-l1-2-0.dll · signed by Microsoft Corporation

046cb1c773661589b60442826bc7c7324fcbe283f9ad830bfb9ccde6105eac33

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-core-console-l1-2-0.dll · signed by Microsoft Corporation

2d6f7296759859738048cf02b07f381cab62045037950e590f419df824adfc36

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\arm\api-ms-win-core-console-l1-2-0.dll · signed by Microsoft Windows Kits Publisher

763c470533b8a96fee3a2c98147e8e4a30d9dcdd1b7df2dd5cf78ad3d2496ae9

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x86\api-ms-win-core-console-l1-2-0.dll · signed by Microsoft Corporation

a6079737a41364283c1990d2e52e7289c01a88a0abe19a831f72ea37771e856e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.