symsrv.dll

Microsoft Symbol Server file version info

Library on Windows 9 known copies with hashes

Is it the real symsrv.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Kits\10\App Certification Kit\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\
C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\symproxy\

Signed byMicrosoft Corporation

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionMicrosoft Symbol Server

9 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\symproxy\symsrv.dll · signed by Microsoft Corporation

08fc815acbbb13340a185c1fe6088f10bdda683cab4153a96b8352ff2b19e6ee

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\symproxy\symsrv.dll · signed by Microsoft Corporation

a604a4b6211abf6aa264e5d2f7b9c0af99d56b1e040df25c2510de8fc26c199e

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\symproxy\symsrv.dll · signed by Microsoft Corporation

a6ae66164bc0889b32a87343b3d4a458eebc7e6e9422055da88404dee5616e99

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm64\symsrv.dll · signed by Microsoft Corporation

db4492625b0fcf164296441692f2277daab10f90f55edfbf070cbc1b798fb1fc

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x64\symsrv.dll · signed by Microsoft Corporation

db4d9a1a57c38ad2bcf329c58b7f35d8a90e54faf5464e8997bcfb917e21c704

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\symproxy\symsrv.dll · signed by Microsoft Corporation

ecb35ff550590f91fa3b1bf7159ed786c9007b69983b02278bcbf587ef6faac8

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\x86\symsrv.dll · signed by Microsoft Corporation

f528a312c1e60bf96f434c667f60798a9f7df1b46c7d912cfe6a25e59bb2f01a

10.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Kits\10\Debuggers\arm\symsrv.dll · signed by Microsoft Corporation

f7f4ecf94ad6f782b718a5a3b6e69a8821b7ac655b90e1296a0c3629135bcae8

6.3.9600.16384 (debuggers(dbg).130821-1623) · C:\Program Files (x86)\Windows Kits\10\App Certification Kit\symsrv.dll · signed by Microsoft Corporation

664b5bbd2186151d0d76544a182333eb8bc4e3f54509b15d9e9f93c6fc66d482

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.