PaymentMediatorServiceProxy.dll
Payment Mediator Service Proxy file version info
Library on Windows 2 known copies with hashes
Is it the real PaymentMediatorServiceProxy.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPayment Mediator Service Proxy
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\PaymentMediatorServiceProxy.dll · signed by Microsoft Windows
76056025d292f606a482a9217209d0aca1dadd244d258c293e097082b947a25510.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\PaymentMediatorServiceProxy.dll · signed by Microsoft Windows
d2384e7de710f53920a689727a9dbdbf2dc1fc6382b22e9834c39fc9992d7491From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.