CmdID

CmdID / Files

MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL

Microsoft.Data.Recommendation.Common file version info

Library on Windows 2 known copies with hashes

Is it the real MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL?

file version info and known copies
Installed inC:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\
C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\
Signed byMicrosoft Corporation
ProductMicrosoft SQL Server, Microsoft Corporation
DescriptionMicrosoft.Data.Recommendation.Common

2 known copies

2015.130.800.1152 · C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\Microsoft.Data.Recommendation.Common.dll · signed by Microsoft Corporation

e98d51a0677bfea272d607e0c99df0831ece796692473c936ca89a0799d90044

2011.0110.2213.85 ((orlando).131111-1334) · C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\Power Map Excel Add-in\MICROSOFT.DATA.RECOMMENDATION.COMMON.DLL · signed by Microsoft Corporation

23548fbe1c2bbb248def24a44ece2f65e0495e9efdca8ab49fa6c068e54d34a2

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.