xmlrw.dll

XMLRW file version info

Library on Windows 2 known copies with hashes

Is it the real xmlrw.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\SYSTEM\ole db\
C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\

Signed byMicrosoft Corporation

ProductMicrosoft SQL Server, Microsoft Corporation

DescriptionXMLRW

2 known copies

2019.0150.2000.05 ((SQLServer).190924-2033) · C:\Program Files\Microsoft SQL Server\Client SDK\ODBC\170\Tools\Binn\xmlrw.dll · signed by Microsoft Corporation

c79973b52284933b20aa754f8396b9a725ae0cb9d49c01fcece57e240cf03a8b

2019.0150.1500.158 ((BI_Main).190506-1918) · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\SYSTEM\ole db\xmlrw.dll · signed by Microsoft Corporation

107f724a793c46108c49075e8e1d91b62da5c297c916692c6bc71dcc6f1fa28e

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.