gacutlrc.dll

Microsoft (R) .NET Framework Global Assembly Cache Utility file version info

Library on Windows 2 known copies with hashes

Is it the real gacutlrc.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\1033\
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\1033\

Signed byMicrosoft Corporation

ProductMicrosoft .NET Framework, Microsoft Corporation

DescriptionMicrosoft (R) .NET Framework Global Assembly Cache Utility

2 known copies

4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\1033\gacutlrc.dll · signed by Microsoft Corporation

8e387159ec7181dc41ec344a08a8c50d7a54d817c4930c5e97f935aa7948972f

4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\1033\gacutlrc.dll · signed by Microsoft Corporation

c3f282977206b46195ab935340e97d35e4a00be673a387efffad09d7b157d9a4

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.