CmdID

CmdID / Files

prm0009.dll

Microsoft English Natural Language Data and Code file version info

Library on Windows 1 known copy with hashes

Is it the real prm0009.dll?

file version info and known copies
Installed inC:\Windows\system32\
Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft English Natural Language Data and Code

1 known copy

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\prm0009.dll · signed by Microsoft Windows

SHA-2568661b4e72de38df01673dca81ea1daa3988fa9d4d5c5fec33b162673c8ac44a2SHA-10a7664e6fc6f52e609b9ccb2814ec3ce8422acb9MD5ee84c818ee8488c2a17cba090db5c1fb

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.