IlDasmrc.dll

Microsoft .NET Framework IL disassembler file version info

Library on Windows 2 known copies with hashes

Is it the real IlDasmrc.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\1033\
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\1033\

Signed byMicrosoft Corporation

ProductMicrosoft .NET Framework, Microsoft Corporation

DescriptionMicrosoft .NET Framework IL disassembler

2 known copies

4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\1033\IlDasmrc.dll · signed by Microsoft Corporation

00dedfcc0f868348ade9c5ad44ca63294bd2031a53ed21b786875339c259df32

4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\1033\IlDasmrc.dll · signed by Microsoft Corporation

2a6ee51a55e32b389b816bd88ce9ec97402912e1a878a130c3a1cc65a565a0dc

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.