CmdID

CmdID / Files

vccorlib140.dll

Microsoft VC WinRT core library file version info

Library on Windows 4 known copies with hashes

Is it the real vccorlib140.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Cisco Systems\Cisco Jabber\
C:\Program Files (x86)\Microsoft Office\root\Client\
C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\
Signed byMicrosoft Corporation
ProductMicrosoft Visual Studio 2017, Microsoft Corporation
DescriptionMicrosoft VC WinRT core library

4 known copies

14.26.28720.3 built by: vcwrkspc · C:\Program Files (x86)\Microsoft\Edge\Application\85.0.564.68\vccorlib140.dll · signed by Microsoft Corporation

4d5da73315f2c3ebddabdfc28ef5399eec2778f3a58e74f2951a686ed93991c1

14.16.27033.0 built by: vcwrkspc · C:\Program Files\Common Files\microsoft shared\ClickToRun\vccorlib140.dll · signed by Microsoft Corporation

5966e6f9de7a3aac11d22c899bd7b3a1248b3c375461c1ce10efb8eb871b394e

14.16.27033.0 built by: vcwrkspc · C:\Program Files (x86)\Microsoft Office\root\Client\vccorlib140.dll · signed by Microsoft Corporation

70863045102274c9bf78baa4d2774b334f92329567a3dd6c246e7876f6b851a3

14.00.24210.0 built by: VCTOOLSREL · C:\Program Files (x86)\Cisco Systems\Cisco Jabber\vccorlib140.dll · signed by Microsoft Corporation

f3bcc4a3ae6cd03e08ec48411b6927a0a163af6f92384279c1dd7afcb7f52293

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.