CmdID

CmdID / Files

WUIALoggerXml.dll

Library on Windows 4 known copies with hashes

Is it the real WUIALoggerXml.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\UIAVerify\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft (R) Windows (R) Operating System, Microsoft Corporation

4 known copies

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\UIAVerify\WUIALoggerXml.dll · signed by Microsoft Corporation

3a233ba898ebf2bb548a2eb5cbfb766ed8e77957f787bf85b0e08ddf292e0b1c

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\WUIALoggerXml.dll · signed by Microsoft Windows Kits Publisher

c62ae6983e7013101ed6f995e31d5c271a003643aa278175286c85cdc6a96c60

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\UIAVerify\WUIALoggerXml.dll · signed by Microsoft Corporation

eafe0798c2c3881d3ce2fad56d5fc9f543a3a1ad5cd802d6515ab023118daa4c

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\WUIALoggerXml.dll · signed by Microsoft Windows Kits Publisher

f1e406702e7e656aad78501fdf31f4b05969668fb9077736d0aad5297011a19c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.