mswmdm.dll
Windows Media Device Manager Core file version info
Library on Windows 2 known copies with hashes
Is it the real mswmdm.dll?
Original name
WMDM.dll in the file’s header: a renamed copy still carries itInstalled in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductWindows Media Device Manager, Microsoft Corporation
DescriptionWindows Media Device Manager Core
2 known copies
12.0.19041.329 · C:\Windows\SysWOW64\mswmdm.dll · signed by Microsoft Windows
fac6ea10fb4642dea8fcc32ff0bb6fcf195b4fc6892d6070c4054cf3d9dc46b612.0.19041.1 · C:\Windows\system32\mswmdm.dll · signed by Microsoft Windows
88e5cffc35632e6a2c401f439f3a6f5f68033d91ff45962f38961758a10dd873From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.