CPFilters.dll
PTFilter & Encypter/Decrypter Tagger Filters. file version info
Library on Windows 2 known copies with hashes
Is it the real CPFilters.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft Windows Operating System, Microsoft Corporation
DescriptionPTFilter & Encypter/Decrypter Tagger Filters.
2 known copies
10.0.19041.508 (WinBuild.160101.0800) · C:\Windows\SysWOW64\CPFilters.dll · signed by Microsoft Windows
b08a8ab0fca5976f4f626767efe08fa6b1257f2d9c91484de6f8b5f75624179710.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\CPFilters.dll · signed by Microsoft Windows
8e293d852dc10b4a1df9b62381723667238e3ad49a5e49d4180ab15f9411ac32From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.