CmdID

CmdID / Files

appxsip.dll

Appx Subject Interface Package file version info

Library on Windows 5 known copies with hashes

Is it the real appxsip.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\App Certification Kit\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAppx Subject Interface Package

5 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\appxsip.dll · signed by Microsoft Corporation

264fd0e397688cce8e5094988cc838db18587b28ea2c39101100096e9a328461

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\App Certification Kit\appxsip.dll · signed by Microsoft Corporation

442ebea0a4972cf2be74d45d9a98973d56f3ef156d34d84a2eaa0ff50a949805

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\AppxSip.dll · signed by Microsoft Windows

d2c7975673dead69017de35e1e4ac7f05c50147483055e340642ee563c997674

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\appxsip.dll · signed by Microsoft Corporation

f235daadda978b024fb1f26dd99b94505cd78385a79e315d27e269e4ab5df9a9

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\AppxSip.dll · signed by Microsoft Windows

f899466b8242ea49aae2074a91796ae76d9bde347836fb58ec933158a039de5e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.