CmdID / Files

WMPNSSUI.dll

Windows Media Player WMPNSS Shell Extensions file version info

Library on Windows 2 known copies with hashes

Is it the real WMPNSSUI.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Windows Media Player\
C:\Program Files\Windows Media Player\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionWindows Media Player WMPNSS Shell Extensions

2 known copies

12.0.19041.1 (WinBuild.160101.0800) · C:\Program Files\Windows Media Player\WMPNSSUI.dll · signed by Microsoft Windows

9887affa2d6eac2ae68dda60af3b9b25ba3cedd00e0861e1e57df5d017146f8a

12.0.19041.1 (WinBuild.160101.0800) · C:\Program Files (x86)\Windows Media Player\WMPNSSUI.dll · signed by Microsoft Windows

ea06a1ca5568f5f0d87bc362609dfd12d837494f797403245e9b44d58ae1a2b2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.