msafd.dll
Microsoft Windows Sockets 2.0 Service Provider file version info
Library on Windows 2 known copies with hashes
Is it the real msafd.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft Windows Sockets 2.0 Service Provider
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\msafd.dll · signed by Microsoft Windows
b96adef36fafd1cf953d87777cfd4f63d23942e26a1441635d5f94e7b73a285010.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\msafd.dll · signed by Microsoft Windows
c758a6a9448f739be478d3dbf1a84abf9ece53b94d5b82c68e8ea222ccf1892fFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.