hbaapi.dll
HBA API data interface dll for HBA_API_Rev_2-18_2002MAR1.doc file version info
Library on Windows 2 known copies with hashes
Is it the real hbaapi.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionHBA API data interface dll for HBA_API_Rev_2-18_2002MAR1.doc
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\hbaapi.dll · signed by Microsoft Windows
1640b3e5a73d09ac3f1fe4ea1b548475b895c6213d6ba41869f649157e0158df10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\hbaapi.dll · signed by Microsoft Windows
ceb8139599bd2eccf416e16c0a604227b42fd21e99d404479816779c115e53ccFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.