CmdID

CmdID / Files

WUIALogging.dll

Library on Windows 4 known copies with hashes

Is it the real WUIALogging.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\UIAVerify\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft (R) Windows (R) Operating System, Microsoft Corporation

4 known copies

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\UIAVerify\WUIALogging.dll · signed by Microsoft Corporation

13d33b69f424d8fcd046226e481c4b605253ee712955b3f439f7cfa71d29ee60

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\WUIALogging.dll · signed by Microsoft Windows Kits Publisher

3b4271df591b5f570987b93367661d303b29d76a4e4b4b9e35033db38d34ae59

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\UIAVerify\WUIALogging.dll · signed by Microsoft Corporation

4827477d916bc114797047199d29f2fe4f7ad23683ddee2415c34360bb9483f2

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\WUIALogging.dll · signed by Microsoft Windows Kits Publisher

ac4c278025bc872b78ea38c5df61a1b8980e4f038902ef66c0fbc39f6aaf96e7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.