CmdID / Files

UpdateAgent.dll

Update Agent file version info

Library on Windows 1 known copy with hashes

Is it the real UpdateAgent.dll?

file version info and known copies

Installed inC:\Windows\system32\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionUpdate Agent

1 known copy

10.0.19041.508 (vb_release_svc_prod1.200905-1327) · C:\Windows\system32\UpdateAgent.dll · signed by Microsoft Windows

58fac55588e51312ecc089933a61fb2922754b5697806983421c25b08b2a693a

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.