CoreMas.dll
Library on Windows 2 known copies with hashes
Is it the real CoreMas.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
2 known copies
Version not recorded · C:\Windows\SysWOW64\CoreMas.dll · signed by Microsoft Windows
35d41da281cfb6e9bb7ae3eb40b9ce8669a0d5dba843310ba14f63692f588cbbVersion not recorded · C:\Windows\system32\CoreMas.dll · signed by Microsoft Windows
96681b6cc1e20ede9481bc3dc9804e772d11ce360b919e555925f602132e5c3dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.