CmdID / Files

VCCORLIB140_APP.DLL

Microsoft VC WinRT core library file version info

Library on Windows 1 known copy with hashes

Is it the real VCCORLIB140_APP.DLL?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft Office\root\Office16\

Signed byWindows Phone

ProductMicrosoft Visual Studio 2017, Microsoft Corporation

DescriptionMicrosoft VC WinRT core library

1 known copy

14.13.26118.0 built by: VCTOOLSREL · C:\Program Files (x86)\Microsoft Office\root\Office16\VCCORLIB140_APP.DLL · signed by Windows Phone

663ce29401655ed87d3ba6f728f2339ed17a297f03ef58b25c2e618435d26959

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.