CmdID / Files

spwizres.dll

Setup Wizard Framework Resources file version info

Library on Windows 1 known copy with hashes

Is it the real spwizres.dll?

file version info and known copies

Installed inC:\Windows\system32\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionSetup Wizard Framework Resources

1 known copy

10.0.19041.117 (WinBuild.160101.0800) · C:\Windows\system32\spwizres.dll · signed by Microsoft Windows

c6f603e7a2d58a77529eda808af0a9d235b4f87c999e55bcf00a73375eb3aea6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.