CmdID

CmdID / Files

PortalConnect.dll

Microsoft Office SharePoint Server client library file version info

Library on Windows 1 known copy with hashes

Is it the real PortalConnect.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Portal\1033\
Signed byMicrosoft Corporation
ProductMicrosoft Office, Microsoft Corporation
DescriptionMicrosoft Office SharePoint Server client library

1 known copy

16.0.12325.20144 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Portal\1033\PortalConnect.dll · signed by Microsoft Corporation

SHA-2567ceb27d55f875f6a4302ea6fa66e1c354421ee3661661e38adb8e1804c48bf5bSHA-1fa771c8d3eaa73d13e4cc230c1c390ac850d7a57MD5e8d9a26d6e933c7b418bd5a4995e5cd6

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<hash>".whatis() says which known copy an MD5, SHA-1 or SHA-256 is.