wsp_health.dll
Windows Storage Provider for Health Agent API file version info
Library on Windows 2 known copies with hashes
Is it the real wsp_health.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionWindows Storage Provider for Health Agent API
2 known copies
10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\SysWOW64\wsp_health.dll · signed by Microsoft Windows
10afa881feec712741b0a9f56b5d9d9b777d0f5f3dbedc8fcb4866f94eb83ae410.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\wsp_health.dll · signed by Microsoft Windows
6b2c4d3f1bced31008c33e1a35eea1af3204b3b113694d740afa58fbd2b627aeFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.