CmdID / Files

PresentationFramework.dll

PresentationFramework.dll file version info

Library on Windows 1 known copy with hashes

Is it the real PresentationFramework.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.8\

Signed byMicrosoft Corporation

ProductMicrosoft .NET Framework, Microsoft Corporation

DescriptionPresentationFramework.dll

1 known copy

4.8.4084.0 · C:\Program Files (x86)\Reference Assemblies\Microsoft\Framework\.NETFramework\v4.8\PresentationFramework.dll · signed by Microsoft Corporation

5ac07bc6eee5941b28be372c8fe32387d3ff65f399c24e0d6067e678eb7dac25

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.