pevrfyrc.dll

Microsoft .NET Framework PE, Metadata and IL Verification Tool file version info

Library on Windows 2 known copies with hashes

Is it the real pevrfyrc.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\1033\
C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\1033\

Signed byMicrosoft Corporation

ProductMicrosoft .NET Framework, Microsoft Corporation

DescriptionMicrosoft .NET Framework PE, Metadata and IL Verification Tool

2 known copies

4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\1033\pevrfyrc.dll · signed by Microsoft Corporation

bf3ea09d06c9f93b127a2ef69d1a1a95a800aa66c2f70e49add85cdee23520ca

4.8.4084.0 built by: NET48REL1 · C:\Program Files (x86)\Microsoft SDKs\Windows\v10.0A\bin\NETFX 4.8 Tools\x64\1033\pevrfyrc.dll · signed by Microsoft Corporation

e251ad4dfb3c779a41264bf6aa845325778735901dc92d36c576c39130769bdc

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.