CmdID / Files

msv1_0.dll

Microsoft Authentication Package v1.0 file version info

Library on Windows 2 known copies with hashes

Is it the real msv1_0.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft Authentication Package v1.0

2 known copies

10.0.19041.450 (WinBuild.160101.0800) · C:\Windows\SysWOW64\msv1_0.dll · signed by Microsoft Windows

SHA-256daa7d34432430a1e794981e817513511037730bbdf2b129c5e3594992709c374SHA-1865acf31d3ec7fe6486ca00bf2b80318efd674b2MD591d42e5bd4b5448173b779b61f5d1cae

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\msv1_0.dll · signed by Microsoft Windows

SHA-256503b89bc5f040d0ca02069b649231e55bd39f836b846b7377f50c19bcb8ae16dSHA-18699d30d29f9162a16460cb3109864bb3c2f7ff5MD5138eeb57e7af90ecc23cab12fd6ab487

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.