MXDWDRV.DLL

Microsoft XPS Document Writer file version info

Library on Windows 2 known copies with hashes

Is it the real MXDWDRV.DLL?

file version info and known copies

Installed inC:\Windows\system32\DriverStore\FileRepository\ntprint.inf_amd64_311ad0065d69f772\Amd64\
C:\Windows\system32\DriverStore\FileRepository\ntprint.inf_x86_311ad0065d69f772\I386\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft XPS Document Writer

2 known copies

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\DriverStore\FileRepository\ntprint.inf_x86_311ad0065d69f772\I386\MXDWDRV.DLL · signed by Microsoft Windows

SHA-2562f337d277c29a4c7cabdc98daf1eecf91b8362066da3f201844f1780914cb1abSHA-1ab64eaa6cfe738640b00bfafe5db7985695c72e6MD55391e9164add3cdb47fcc08883f9ab7c

10.0.19041.264 (WinBuild.160101.0800) · C:\Windows\system32\DriverStore\FileRepository\ntprint.inf_amd64_311ad0065d69f772\Amd64\MXDWDRV.DLL · signed by Microsoft Windows

SHA-256e31de622c6165671a204dfd96805d68a469320bdd215f769447c6c65ea8302d7SHA-1f254dd3fd812e1341d2e278c2fab744f8b767996MD58fc97983bfac162a9ae8af8dcea6ab4c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.