CmdID

CmdID / Files

HoloShellRuntime.dll

Hologram Shell Runtime file version info

Library on Windows 2 known copies with hashes

Is it the real HoloShellRuntime.dll?

file version info and known copies
Installed inC:\Windows\system32\
C:\Windows\SysWOW64\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionHologram Shell Runtime

2 known copies

10.0.19041.388 (WinBuild.160101.0800) · C:\Windows\SysWOW64\HoloShellRuntime.dll · signed by Microsoft Windows

754d8a66ba092cea7ea339aa897793c821bb5010580359f1328c33bbfb8372ab

10.0.19041.388 (WinBuild.160101.0800) · C:\Windows\system32\HoloShellRuntime.dll · signed by Microsoft Windows

7d82ba500e65351d2f63b69ab63a6c03a6036ad5f2d556e80e9b864c76f80396

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.