CmdID / Files

CompPkgSup.dll

Component Package Support DLL file version info

Library on Windows 2 known copies with hashes

Is it the real CompPkgSup.dll?

file version info and known copies

Installed inC:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionComponent Package Support DLL

2 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\CompPkgSup.dll · signed by Microsoft Windows

SHA-256348b882238a0cbff56cab8296cd416cbce1d3b1b6b9b1bf571e7759ca5cf96c9SHA-1693e9c0591b23569825d2a77d1bfec871a8c9140MD52455ddd2b651381a55d06a4c7af6ad7e

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\CompPkgSup.dll · signed by Microsoft Windows

SHA-2566fa6dd79b4d124d60e451787e40b127b90496aab9767cfe3704f2d55c12ea3edSHA-1dd98f57da58f0a8bf367051460ad4aa8441b2828MD5eaaa8f48768517885b22bc3cd424fb6d

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.