provisioningtesthelper.dll

ProvisioningTestHelper file version info

Library on Windows 4 known copies with hashes

Is it the real provisioningtesthelper.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\

Signed byMicrosoft Windows Kits Publisher

ProductMicrosoft (R) Windows (R) Operating System, Microsoft Corporation

DescriptionProvisioningTestHelper

4 known copies

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\provisioningtesthelper.dll · signed by Microsoft Windows Kits Publisher

1dece9b21ba42dd44b01acf702b2edada48eeda30bc71d0a12f82e4a17793182

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\provisioningtesthelper.dll · signed by Microsoft Windows Kits Publisher

8ff3ce5684b06eba5fcc4db124abab29e7cc4460096e9f42ea26553c9e448a13

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\provisioningtesthelper.dll · signed by Microsoft Corporation

f4dfbfa487a41fbf4f64c097550783e57b14e4d52e0a0d631ab44da283421310

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\provisioningtesthelper.dll · signed by Microsoft Corporation

f82756cda25b2586576d80e969100b47eb4469e829c5a3888c0c8fd7c1091bb2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.