xamldiagnostics.dll
Xaml Diagnostics file version info
Library on Windows 4 known copies with hashes
Is it the real xamldiagnostics.dll?
C:\Program Files (x86)\Windows Kits\10\bin\arm64\XamlDiagnostics\C:\Program Files (x86)\Windows Kits\10\bin\arm\XamlDiagnostics\C:\Program Files (x86)\Windows Kits\10\bin\x64\XamlDiagnostics\4 known copies
10.0.14393.33 (rs1_release_sec.160727-1952) · C:\Program Files (x86)\Windows Kits\10\bin\arm\XamlDiagnostics\xamldiagnostics.dll · signed by Microsoft Windows Kits Publisher
65f904b3e04982a48af4b8ab72dc3eb9a48ef1304656c3ea1382b17793ac4c6510.0.14393.33 (rs1_release_sec.160727-1952) · C:\Program Files (x86)\Windows Kits\10\bin\arm64\XamlDiagnostics\xamldiagnostics.dll · signed by Microsoft Windows Kits Publisher
694c63ae8e95a44be352a041e64b17c17c7eb101270e1d0fb7ad6f7001bb871d10.0.14393.33 (rs1_release_sec.160727-1952) · C:\Program Files (x86)\Windows Kits\10\bin\x86\XamlDiagnostics\xamldiagnostics.dll · not signed
8d6289935351169624f192b391e6b4e9c25b28dd2271a22b48709903adb3e31b10.0.14393.33 (rs1_release_sec.160727-1952) · C:\Program Files (x86)\Windows Kits\10\bin\x64\XamlDiagnostics\xamldiagnostics.dll · not signed
e6778fc47676fa9343ee072af43d7acd62a08d374c36e6cc53d5ba662841e2bdFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.