srm.dll
Microsoft File Server Resource Manager Common Library file version info
Library on Windows 2 known copies with hashes
Is it the real srm.dll?
Original name
srm.lib in the file’s header: a renamed copy still carries itInstalled in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionMicrosoft File Server Resource Manager Common Library
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\srm.dll · signed by Microsoft Windows
aa00cd82b126d7dd7bc3b003f1ecda862f1354f8f53c43d8b36904703dae8fbd10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\srm.dll · signed by Microsoft Windows
feeca607bf2e0bcdff4ab978621a8589928f23e5899cc70b2ee1969b0917c07dFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.