CmdID / Files

odbctrac.dll

ODBC Driver Manager Trace file version info

Library on Windows 3 known copies with hashes

Is it the real odbctrac.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft Office\root\Office16\
C:\Windows\system32\
C:\Windows\SysWOW64\

Signed byMicrosoft Windows

ProductMicrosoft Windows Operating System, Microsoft Corporation

DescriptionODBC Driver Manager Trace

3 known copies

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\SysWOW64\odbctrac.dll · signed by Microsoft Windows

1668d844c1965b7e3df283f54be538688f5e40f740509d92b5ce29fc1de8c8ac

10.0.19041.1 (WinBuild.160101.0800) · C:\Windows\system32\odbctrac.dll · signed by Microsoft Windows

da612cfd35fb93c94c08a13a60b69214c75b4b4e258397a5a400ab6a5350ac5e

10.0.16227.1000 (GitEnlistment(deata).170614-1629) · C:\Program Files (x86)\Microsoft Office\root\Office16\ODBCTRAC.DLL · signed by Microsoft Corporation

13b069303405e5de367bd3bcd25097f4659b95d9edc19c929d8a7a60f2c1cf6e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.