WMPhoto.dll
Windows Media Photo Codec file version info
Library on Windows 2 known copies with hashes
Is it the real WMPhoto.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Media Photo Codec
2 known copies
10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\WMPhoto.dll · signed by Microsoft Windows
0c1d6e363ca96017d63f09ea63beb04be4e6396d6837151ee663ec2c2146c95110.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WMPhoto.dll · signed by Microsoft Windows
99b0c7281673b438fd4e37190a5232620f472d797696f1fe109f8fdb840ba006From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.