CmdID / Files

WMADMOD.DLL

Windows Media Audio Decoder file version info

Library on Windows 2 known copies with hashes

Is it the real WMADMOD.DLL?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionWindows Media Audio Decoder

2 known copies

10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\system32\WMADMOD.DLL · signed by Microsoft Windows

5d61c02f18e66158a85dbbeab1673bf84ff684be0f3a9fe8321a1c0b1eed5fac

10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\SysWOW64\WMADMOD.DLL · signed by Microsoft Windows

e50bd8e236c40c719b8877545ee8d56294b0ead1d4bd48991bfe6c6b76bbee9e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.