CmdID / Files

xwtpdui.dll

Extensible Wizard Type Plugin for DUI file version info

Library on Windows 2 known copies with hashes

Is it the real xwtpdui.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionExtensible Wizard Type Plugin for DUI

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\xwtpdui.dll · signed by Microsoft Windows

08c4c29dd13aa751f67fe00cbd2b88815fbe933ea233593fc76aca1ccd3d26c0

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\xwtpdui.dll · signed by Microsoft Windows

0c70c12f50a8eebbb8e595a7787cbd9dd202fbd91d5f83534754465c5f0d5298

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.