CmdID / Files

Windows.Devices.Picker.dll

Device Picker file version info

Library on Windows 2 known copies with hashes

Is it the real Windows.Devices.Picker.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionDevice Picker

2 known copies

10.0.19041.388 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Windows.Devices.Picker.dll · signed by Microsoft Windows

SHA-2563d9d46b04afeda02272fe8aceb09a57845d4e13b2cac032f53492bb60f03ca38SHA-1bd4f7c23d772f6f500a9093ba7462d63dcf2c1cbMD5fb1c83cb61be4634a76582a84b344c45

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\Windows.Devices.Picker.dll · signed by Microsoft Windows

SHA-25635814f724a2ad9b60e07bb219ab7e6ee0985dcb2e2d56d1f3528b499132a27c8SHA-1dc803a65396aa5709eb80a6798ad3a5208e9574dMD55aaa176e71c78d06292ed071ce52a9b0

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.