CmdID / Files

CoreMmRes.dll

General Core Multimedia Resources file version info

Library on Windows 2 known copies with hashes

Is it the real CoreMmRes.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionGeneral Core Multimedia Resources

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CoreMmRes.dll · signed by Microsoft Windows

6ba51007b33f1d209e41a34377ced75a8e0a8b58b1a4e184925d3fb89841cebb

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\CoreMmRes.dll · signed by Microsoft Windows

bc0244d5cd538ed68ed1d90796cfd1829436767105dc9e098aa715471abf3080

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.