MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL

Client.Core file version info

Library on Windows 2 known copies with hashes

Is it the real MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\

Signed byMicrosoft Corporation

ProductMicrosoft SQL Server, Microsoft Corporation

DescriptionClient.Core

2 known copies

2015.130.800.1152 · C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Client.Core.dll · signed by Microsoft Corporation

3fc315ab7c02f8736ccffbc5612ce3c1a23771c573b88a5a64b646628a75b2a7

2011.0110.2213.85 ((orlando).131111-1334) · C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.CLIENT.CORE.DLL · signed by Microsoft Corporation

d204464c0749c17d3f9458f65b1ad95ddf2d6e0458ba6fa751418a091c5ec4ac

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.