CmdID / Files

Windows.UI.Search.dll

Windows.UI.Search file version info

Library on Windows 2 known copies with hashes

Is it the real Windows.UI.Search.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionWindows.UI.Search

2 known copies

10.0.19041.388 (WinBuild.160101.0800) · C:\Windows\system32\Windows.UI.Search.dll · signed by Microsoft Windows

SHA-25604aff657d2e9cb7efb936f01e3fde05e5f1685407f26fa2c691f240a37026405SHA-178943d82d538da31a2c87dff89d4340d85c4410fMD55981cc0943be503eab8c63eb9a120cb8

10.0.19041.388 (WinBuild.160101.0800) · C:\Windows\SysWOW64\Windows.UI.Search.dll · signed by Microsoft Windows

SHA-2562feea67c72c33ae5d9189096ed57cd8b5268cf385792e8b641af43ede92b8d9aSHA-11273c0e44b20561aa45cc4a526982c040f52c4b3MD5e1cb972c5e81a26f1b2af464acd92f86

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.