CmdID / Files

dot3msm.dll

802.3 Media Specific Module file version info

Library on Windows 2 known copies with hashes

Is it the real dot3msm.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

Description802.3 Media Specific Module

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\dot3msm.dll · signed by Microsoft Windows

4f3eba4c0fa60e1202c2bd5a6c0f7e706c46d0c2f60bb347c395669fa2d67c7b

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\dot3msm.dll · signed by Microsoft Windows

e695e4677e6934dfde1d5efb91c55bf75abd22942b60bda85a90c43e82725234

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.