CmdID

CmdID / Files

Wex.Logger.Interop.dll

Wex.Logger.Interop.dll file version info

Library on Windows 2 known copies with hashes

Is it the real Wex.Logger.Interop.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\
C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\CoreClr\
Signed byMicrosoft Corporation
DescriptionWex.Logger.Interop.dll

2 known copies

10.43.1909.04003 · C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\Wex.Logger.Interop.dll · signed by Microsoft Corporation

SHA-25640a00a291869b6854eb43074db912aac23675bafcdc2fb7a8c18bd53cb58ab8bSHA-1c5a5e6d767cf36180c9b461678e2a0d1fa4eb38dMD527e5b8caf22bc9f850fc72ccc1891739

10.43.1909.04003 · C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\CoreClr\Wex.Logger.Interop.dll · signed by Microsoft Corporation

SHA-256f64100ad9f2c43eeb5bb739f476c065be7b6d4296395b324b647c5ba326bdf9fSHA-19ec5d6ea8c5d98db8161a488068b4f2c968a3c54MD51b2b30d207e4c69efd2ba7cd48c7996b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.