UserDeviceRegistration.dll
AAD User Device Registration WinRT file version info
Library on Windows 2 known copies with hashes
Is it the real UserDeviceRegistration.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAAD User Device Registration WinRT
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\UserDeviceRegistration.dll · signed by Microsoft Windows
146d2e050f7898429cbed6835ac578c65e401af907e3940b6319516a8f8d54a710.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\UserDeviceRegistration.dll · signed by Microsoft Windows
537eb5775d2c19d5e11e82d959084b4889fe626a7224d2620e9be9f087acac63From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.