AppVOrchestration.dll
AppVOrchestration file version info
Library on Windows 2 known copies with hashes
Is it the real AppVOrchestration.dll?
Installed in
C:\Program Files\Common Files\microsoft shared\ClickToRun\C:\Windows\system32\Signed byMicrosoft Corporation
ProductMicrosoft Application Virtualization (App-V), Microsoft Corporation
DescriptionAppVOrchestration
2 known copies
10.0.19041.488 (WinBuild.160101.0800) · C:\Windows\system32\AppVOrchestration.dll · signed by Microsoft Windows
891e85f08dfa93f77e1621e5a24e83a236aba9510c5897058403053149fb81f45.1.154.0 · C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVOrchestration.dll · signed by Microsoft Corporation
1ed32eb18896bd5fb1f6281eb875ce21dfa9ea20ffaa7e6c3b94eeb23f13aeddFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.