CmdID / Files

MSMPEG2ENC.DLL

Microsoft MPEG-2 Encoder file version info

Library on Windows 2 known copies with hashes

Is it the real MSMPEG2ENC.DLL?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft MPEG-2 Encoder

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\MSMPEG2ENC.DLL · signed by Microsoft Windows

SHA-25636959cf94c06ba01a224e5d92b7d7696ed6bba9d2f8312edf5adcc2dcb8a9b7aSHA-1b521157c2549c38fdcb3fca7e241d7a0c29aca5aMD540d9e3cc2ab21761d00e596bca618ef8

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\MSMPEG2ENC.DLL · signed by Microsoft Windows

SHA-256f8bf0b347629289bb5a45fa4168ed498dc4b7c8a49f5faccd07c57820ddeb0f0SHA-163860c62ab4c582a4d9c6e4cda1235483e83d92eMD537764d6f84bc8d50298cf2bef43aef04

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.