CmdID

CmdID / Files

hcproviders.dll

Security and Maintenance Providers file version info

Library on Windows 2 known copies with hashes

Is it the real hcproviders.dll?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionSecurity and Maintenance Providers

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\hcproviders.dll · signed by Microsoft Windows

712352a322a2f92ed71d583b24e0136d3b082c7ec980d861ad6003493ff0082f

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\hcproviders.dll · signed by Microsoft Windows

81c5415f065bb75e894ec0b54a76dcb8b6aaec9083d736308a5ec794f6691c31

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.