CmdID / Files

Microsoft.VisualBasic.dll

Visual Basic Runtime Library file version info

Library on Windows 1 known copy with hashes

Is it the real Microsoft.VisualBasic.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.8\

Signed byMicrosoft Corporation

ProductMicrosoft .NET Framework, Microsoft Corporation

DescriptionVisual Basic Runtime Library

1 known copy

14.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.8\Microsoft.VisualBasic.dll · signed by Microsoft Corporation

3ab15cec2cb631f62884f1b4af53b50d7a2ea506e60db9c2681dc2c8c77c14e6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.