WorkFoldersRes.dll
Work Folders Resources file version info
Library on Windows 2 known copies with hashes
Is it the real WorkFoldersRes.dll?
Installed in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductWork Folders, Microsoft Corporation
DescriptionWork Folders Resources
2 known copies
6.2.9200.16384 · C:\Windows\SysWOW64\WorkFoldersRes.dll · signed by Microsoft Windows
634f0f2b16bd4b815115341e80fc173c6e68b43611dcb11c74a42d35b5b0b72b6.2.9200.16384 · C:\Windows\system32\WorkFoldersRes.dll · signed by Microsoft Windows
bd1dd4d3211d9d95ed601b0f0e2e8a9e9ec284aa1f2cb4f06ccd680ceab5eb08From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.