CmdID

CmdID / Files

WTTlogcm.dll

WTTLogger_COM_GitEnlistment(winpbld) file version info

Library on Windows 2 known copies with hashes

Is it the real WTTlogcm.dll?

file version info and known copies
Original nameWTTLog.dll in the file’s header: a renamed copy still carries it
Installed inC:\Program Files (x86)\Windows Kits\10\Debuggers\x64\
C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\MinTe\
ProductWTT, Microsoft Corporation
DescriptionWTTLogger_COM_GitEnlistment(winpbld)

2 known copies

2.7.3483.0 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Testing\Runtimes\TAEF\MinTe\WTTlogcm.dll · not signed

04d766a72479021f2bbf0e64bf789a5db8ebc295c186ec41dfca2d36d57dc7f4

2.7.3483.0 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\WTTlogcm.dll · not signed

b0d07f4a9bc287c71debb2a4a5c32216a21266ff5f935562c47c53930f56ad8c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.