CmdID / Files

pidgenx.dll

Pid Generation file version info

Library on Windows 3 known copies with hashes

Is it the real pidgenx.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft Office\root\Office15\
C:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionPid Generation

3 known copies

15.0.0169.500 (win7sp1_gdr_oob_osppv2(oobla).120705-1631) · C:\Program Files (x86)\Microsoft Office\root\Office15\pidgenx.dll · signed by Microsoft Corporation

92c464c1e6c5da57dbad809596bd20e646d5286ee40610408c104617ccc655ec

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\pidgenx.dll · signed by Microsoft Windows

c95171393d0b34cc237149ff86de434b1a94c272f1213943e82aefe65ce2bd52

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\pidgenx.dll · signed by Microsoft Windows

fd2d7840d437a81b6d5be1f5c6242f302d9ddfc29d20948accadd2e0b2438483

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.