CmdID / Files

ReportingServicesNativeClient.dll

Reporting Services Native Proxy file version info

Library on Windows 1 known copy with hashes

Is it the real ReportingServicesNativeClient.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\

Signed byMicrosoft Corporation

ProductMicrosoft SQL Server, Microsoft Corporation

DescriptionReporting Services Native Proxy

1 known copy

2015.0130.0800.1152 ((BI_Office_Dev).190912-0131) · C:\Program Files (x86)\Microsoft Office\root\Office16\ADDINS\PowerPivot Excel Add-in\ReportingServicesNativeClient.dll · signed by Microsoft Corporation

ac6e58dc180eb72e4db8ac193a6b761a3a0c94b13d85bafae664f4fb4fb5a9f1

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.