api-ms-win-crt-math-l1-1-0.dll

ApiSet Stub DLL file version info

Library on Windows 10 known copies with hashes

Is it the real api-ms-win-crt-math-l1-1-0.dll?

file version info and known copies

Original nameapisetstub in the file’s header: a renamed copy still carries it

Installed inC:\Program Files (x86)\Cisco Systems\Cisco Jabber\
C:\Program Files (x86)\Cisco Systems\Cisco Jabber\x64\
C:\Program Files (x86)\Microsoft Office\root\Client\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionApiSet Stub DLL

10 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x86\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Windows

247b3dc70ca0540ba7a31e66ad765b2273d7253c20db719c0b14fa48420ce545

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\arm\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Windows Kits Publisher

7dbbdac35f622d40cd7ca26e72a93a9145bb47f234ccaf855a2520d710667c82

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\downlevel\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Windows

8a7bff1c918539a75c25568db25933d653c003e016fd7791a37186b42bbb7c20

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Redist\10.0.19041.0\ucrt\DLLs\x64\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Windows

a2f7fb5d09670e2d785720d07d2541d064d939f3265de725d79dbec07a953b63

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\downlevel\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Windows

e0108a0a6f4f8512598ec885c496a4496e2832f28d11a537e1096bc7354848b9

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Windows Performance Toolkit\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Windows

e4244f90307ab003cb5cc9bcd729ef897abcf26785df9277cbe389e328e0fe0b

10.0.14393.33 (rs1_release_sec.160727-1952) · C:\Program Files (x86)\Cisco Systems\Cisco Jabber\x64\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Corporation

a66780cb0adf2c3448ebead80e32e303baca2b184fc96e9e5d2720211fc694ef

10.0.14388.0 (rs1_release.160709-1635) · C:\Program Files (x86)\Cisco Systems\Cisco Jabber\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Corporation

bf84795a822115a92c3d5f6589052a1aabb190974ee8d892cbd101af4235ffe0

10.0.10240.16384 (th1.150709-1700) · C:\Program Files (x86)\Microsoft Office\root\Client\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Corporation

06985d00bf4985024e95442702bbdb53c2127e99f16440424f3380a88883f1a5

10.0.10240.16384 (th1.150709-1700) · C:\Program Files\Common Files\microsoft shared\ClickToRun\api-ms-win-crt-math-l1-1-0.dll · signed by Microsoft Corporation

9b05a43fdc185497e8c2cea3c6b9eb0d74327bd70913a298a6e8af64514190e8

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.