spnet.dll
Net Sysprep Plugin file version info
Library on Windows 2 known copies with hashes
Is it the real spnet.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionNet Sysprep Plugin
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\spnet.dll · signed by Microsoft Windows
314c3f3b49fcb6691488a7386bd09b69ead70cdf402051ae31d5d422468fa0d910.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\spnet.dll · signed by Microsoft Windows
59944afd78400a6c10986151b6086aef776ad70d51a969fa770cbb28e6b21d91From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.