CmdID

CmdID / Files

WUIATestLibrary.dll

Windows Test Client Library file version info

Library on Windows 4 known copies with hashes

Is it the real WUIATestLibrary.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\
C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\UIAVerify\
Signed byMicrosoft Windows Kits Publisher
ProductMicrosoft (R) Windows (R) Operating System, Microsoft Corporation
DescriptionWindows Test Client Library

4 known copies

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm64\UIAVerify\WUIATestLibrary.dll · signed by Microsoft Windows Kits Publisher

SHA-2560c0217b49402fb78132aff4e3213cf5c309af1879f5bb5e1fb41d5c248e2540bSHA-1b8ac4d31c632d52066d0e2ceb5437761bda039c7MD5f08b85110af32a8f613b989670a326ec

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x64\UIAVerify\WUIATestLibrary.dll · signed by Microsoft Corporation

SHA-25638fa5a91249fd3b4ffd7cd6c66807691956882b00e071fdd3b878164e180fd60SHA-157632854321d74d1504bf70b1fe4dcf2142ee12aMD5ac4bf73551f906f4599bc8bd0699ce7c

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\x86\UIAVerify\WUIATestLibrary.dll · signed by Microsoft Corporation

SHA-256513bebefeb42200690436ce2a2b3c2f2dc9d76f9d8a4c55552e45336384401f5SHA-184eb7f59ed8419a429bc8c6854299facb8a5aa2bMD53ec8c01e14e88f04846b72ee53d3189b

10.0.19041.1 · C:\Program Files (x86)\Windows Kits\10\bin\10.0.19041.0\arm\UIAVerify\WUIATestLibrary.dll · signed by Microsoft Windows Kits Publisher

SHA-256f8fa6c616630f1d5260cc1c65afd7e97c8148edf361d04b2ff6d1b66190f33efSHA-1cbf725d4b077e96a659ae05aba98e3b8ac3bcc43MD538abbdda3949c4ba2695b8b37167ea9b

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.