CmdID / Files

playtomenu.dll

Cast to Device Menu DLL file version info

Library on Windows 2 known copies with hashes

Is it the real playtomenu.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionCast to Device Menu DLL

2 known copies

12.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\playtomenu.dll · signed by Microsoft Windows

4aa2d430ca3c3d5724b5e9c990f96c6a87cc2fd28b5eb040bf725e763b27b32b

12.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\playtomenu.dll · signed by Microsoft Windows

89f9d4c00d92c80bf6e635a24f95908d2f73c9ebbe287a383533f2f89818984c

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.