vccorlib140.dll
Microsoft VC WinRT core library file version info
Library on Windows 4 known copies with hashes
Is it the real vccorlib140.dll?
C:\Program Files (x86)\Cisco Systems\Cisco Jabber\C:\Program Files (x86)\Microsoft Office\root\Client\C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\4 known copies
14.26.28720.3 built by: vcwrkspc · C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\vccorlib140.dll · signed by Microsoft Corporation
4d5da73315f2c3ebddabdfc28ef5399eec2778f3a58e74f2951a686ed93991c114.16.27033.0 built by: vcwrkspc · C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll · signed by Microsoft Corporation
5966e6f9de7a3aac11d22c899bd7b3a1248b3c375461c1ce10efb8eb871b394e14.16.27033.0 built by: vcwrkspc · C:\Program Files (x86)\Microsoft Office\root\Client\vccorlib140.dll · signed by Microsoft Corporation
70863045102274c9bf78baa4d2774b334f92329567a3dd6c246e7876f6b851a314.00.24210.0 built by: VCTOOLSREL · C:\Program Files (x86)\Cisco Systems\Cisco Jabber\vccorlib140.dll · signed by Microsoft Corporation
f3bcc4a3ae6cd03e08ec48411b6927a0a163af6f92384279c1dd7afcb7f52293From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.