cpprestsdk.dll
A Microsoft project for cloud-based client-server communication in native code using a modern asynchronous C++ API design file version info
Library on Windows 2 known copies with hashes
Is it the real cpprestsdk.dll?
Original name
TARGET_NAME.dll in the file’s header: a renamed copy still carries itInstalled in
C:\Program Files (x86)\Microsoft Office\root\Office16\C:\Program Files\Common Files\microsoft shared\ClickToRun\Signed byMicrosoft Corporation
ProductC++ REST SDK, Microsoft
DescriptionA Microsoft project for cloud-based client-server communication in native code using a modern asynchronous C++ API design
2 known copies
2.8.0 · C:\Program Files (x86)\Microsoft Office\root\Office16\cpprestsdk.dll · signed by Microsoft Corporation
427d26a36265b2b7be86302b5f389f2d651f09bb5ebcfa57e8d1949688e365bc2.8.0 · C:\Program Files\Common Files\microsoft shared\ClickToRun\cpprestsdk.dll · signed by Microsoft Corporation
7f313527b022e1c5e8ef7df79b6e208ebc0dd6ec332a6d0180fe14db3f200825From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.