userinitext.dll
UserInit Utility Extension DLL file version info
Library on Windows 2 known copies with hashes
Is it the real userinitext.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionUserInit Utility Extension DLL
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\userinitext.dll · signed by Microsoft Windows
05ff12643c85abea400a081ea21ba185ae30f37d52869e76bb7f410ba394006c10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\userinitext.dll · signed by Microsoft Windows
2e0924f891a9219a6c62b59d611c55ae53b147efbe1cf2d116e41311ed0f5cafFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.