CmdID / Files

WMSPDMOD.DLL

Windows Media Audio Voice Decoder file version info

Library on Windows 2 known copies with hashes

Is it the real WMSPDMOD.DLL?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionWindows Media Audio Voice Decoder

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\WMSPDMOD.DLL · signed by Microsoft Windows

50ab4b7cf4e576be63979bd3ceb96254fd2b69993597a1ff0c5448f7009ecd86

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\WMSPDMOD.DLL · signed by Microsoft Windows

e11452c204d7999a4ae6aec8034e9a45830f643dc9c4a67a1c53869490d6aad7

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.