NcdProp.dll
Advanced network device properties file version info
Library on Windows 2 known copies with hashes
Is it the real NcdProp.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionAdvanced network device properties
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\NcdProp.dll · signed by Microsoft Windows
099b062584dd5c2fcf9fad90ee1d952378f0c58a9e3eae993dea87290549f7d310.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\NcdProp.dll · signed by Microsoft Windows
8251fcb4ae7d2ea3a52f67204ccfc7b0a2becb9c2eb1bdf3d363ab81f2470be3From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.