imapi2fs.dll
Image Mastering File System Imaging API v2 file version info
Library on Windows 2 known copies with hashes
Is it the real imapi2fs.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionImage Mastering File System Imaging API v2
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\imapi2fs.dll · signed by Microsoft Windows
1a42ac7d1b2dccdceeaf8ac9eae4b136052178dd976767e7c31b1fd20ae576a510.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\imapi2fs.dll · signed by Microsoft Windows
b8ba9815e139febe7c1d94dd010d7792208485eab9e574f0f3888f3117fd9f6bFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.