GenXBF.dll

GenXbf file version info

Library on Windows 12 known copies with hashes

Is it the real GenXBF.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.14393.0\x64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.14393.0\x86\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.15063.0\x64\

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionGenXbf

12 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\XamlCompiler\x64\genxbf.dll · not signed

039816bebc74d98bec370fbcfc722f51b3bdc7070f1e61ce9d7605df07361d2f

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\XamlCompiler\x86\genxbf.dll · not signed

327824e85f59014787fef3d9b67a394c3197db5dc4d74bee7fa57925b68d1a92

10.0.17134.12 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.17134.0\x86\genxbf.dll · not signed

8a9ef39f2e5175d6278fc4cc6ee340c66d123ab25a05ea8941e091697f76fb3e

10.0.17134.12 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.17134.0\x64\genxbf.dll · not signed

c474f4f844573798afb16a5af3d6d261720729c520d6aa2e5db02781b07cb929

10.0.16299.214 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x86\genxbf.dll · not signed

9bba008ea7b86de32f8cc0ee9921569102070ce07e39c5fe63eb9887006407b6

10.0.16299.214 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.16299.0\x64\genxbf.dll · not signed

eb93899464a56a8004e06f968b4171ed4423593366febccea81b016c6763cded

10.0.15063.674 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.15063.0\x86\GenXBF.dll · not signed

8af9ff05edf023c23add2e5091af65d099e8c510194c0a1138e374e341603cb2

10.0.15063.674 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.15063.0\x64\GenXBF.dll · not signed

b7c4a1884e344bfcc86280f58996783062bcb8018734f308851d6b7aeede538c

10.0.14393.1083 (rs1_release.170406-1521) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.14393.0\x86\GenXBF.dll · not signed

3e0a52963288ec0193c4e954d76144a6519805b69b1850f60f0341dfb1ef2645

10.0.14393.1083 (rs1_release.170406-1521) · C:\Program Files (x86)\Windows Kits\10\bin\10.0.14393.0\x64\GenXBF.dll · not signed

da350dc7a8ad5c9ff54b80e800798a9ea85a287e2126d2ac427c7adf43cfe27b

10.0.10586.212 (th2_release_sec.160328-1908) · C:\Program Files (x86)\Windows Kits\10\bin\x86\GenXBF.dll · not signed

a019e276c0cd7c612f971c97a683730c38d183373166483fe6d0d94ec3fec9f6

10.0.10586.212 (th2_release_sec.160328-1908) · C:\Program Files (x86)\Windows Kits\10\bin\x64\GenXBF.dll · not signed

df34c6b059344031b8389fd658541dedd10a35f0634689f74b26b853b8b5f777

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.