CmdID

CmdID / Files

dxil.dll

DirectX IL for Redistribution file version info

Library on Windows 4 known copies with hashes

Is it the real dxil.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\
C:\Program Files (x86)\Windows Kits\10\Redist\D3D\x64\
Signed byMicrosoft Corporation
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionDirectX IL for Redistribution

4 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\dxil.dll · signed by Microsoft Corporation

003a4c4b4716b08f059f4a692fecb3c0fc2fc10334cddbc66d16dc8c7f29c5b9

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\dxil.dll · signed by Microsoft Corporation

7efcec66d92339877ccf2b4cb799d8d451c39eb02ef6f488063bd4ae7a404eae

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\D3D\x64\dxil.dll · signed by Microsoft Corporation

cc90f97796d1ee4361a7f5e31dd67816a545c1d6a8abeba991fa07c7ec5b381c

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\D3D\x86\dxil.dll · signed by Microsoft Corporation

dfe7eacf8e995ef86c449119c51c8988ac467f5871b3914c3844bb5e614d69c7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.