msvcr100_clr0400.dll
Microsoft .NET Framework file version info
Library on Windows 2 known copies with hashes
Is it the real msvcr100_clr0400.dll?
Original name
VsVersion.dll in the file’s header: a renamed copy still carries itInstalled in
C:\Windows\system32\C:\Windows\SysWOW64\Signed byMicrosoft Windows
ProductMicrosoft .NET Framework, Microsoft Corporation
DescriptionMicrosoft .NET Framework
2 known copies
14.8.4084.0 built by: NET48REL1 · C:\Windows\SysWOW64\msvcr100_clr0400.dll · signed by Microsoft Windows
0ec970064d98b5825d78e5cc5cda6919ce88dad1d121e8e556872b815a84a49714.8.4084.0 built by: NET48REL1 · C:\Windows\system32\msvcr100_clr0400.dll · signed by Microsoft Windows
d61b0d8b3ca949c56ed6010588aa29f639d4a5a3641f5153598f810cb10ebf8aFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.