CmdID

CmdID / Files

appxpackaging.dll

Native Code Appx Packaging Library file version info

Library on Windows 5 known copies with hashes

Is it the real appxpackaging.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\App Certification Kit\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNative Code Appx Packaging Library

5 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\appxpackaging.dll · signed by Microsoft Corporation

0f3fef4a2e64bb6f18755801e8921c6f960eed8dcd0c9d194a20ab7343066936

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AppxPackaging.dll · signed by Microsoft Windows

2dfd340281337fc5a83bd12c9f7b0067d5770378936fe139118be56d1c1c3812

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\AppxPackaging.dll · signed by Microsoft Windows

721ad1dbddd429df2a65afd2154fb49e00d12f1f6508bd7fcdfe087898992d93

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\App Certification Kit\appxpackaging.dll · signed by Microsoft Corporation

eb0e219c6c274fca87c9693c72e3542df5729d69aabe8b31b02b11ed31d5df5e

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\appxpackaging.dll · signed by Microsoft Corporation

f91808adc533f9abbad7a42db8f8ddeb9d7f48a37f2ffe82733d1283ebd4bb10

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.