question

saliumaama-9473 avatar image
0 Votes"
saliumaama-9473 asked DSPatrick commented

How to check which application is using MSXML4.DLL?

My vulnerability scan has flagged MSXML4.dll on few servers and workstations as unsupported and therefore subject to vulnerabilities. I would like to simply delete them but I would like to know which application installed it and still using it ? Any ideas ? Is there a powershell script I can use to auto remove these dll files

BTW the MSXML4 appears on my supported OS - Win 10, Windows Server 2012 and Windows Server 2016 in the C:\Windows\SYSWOW64\ folder.

windows-serverwindows-server-powershellwindows-10-security
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick commented

As far as what installed it you may need to consult the application documentation. As to what uses it Procmon should help you.
https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

--please don't forget to upvote and Accept as answer if the reply is helpful--



· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--



0 Votes 0 ·
RichMatheisen-8856 avatar image
0 Votes"
RichMatheisen-8856 answered

That DLL is part of Microsoft's XML Core Services 4.0. There's version 6 of this DLL -- MSXML6, but it doesn't support everything that version 4 did. Check if your version is MSXML4.dll SP3.

description-of-an-update-for-microsoft-xml-core-services-4-0-service-pack-2-171a0bd5-cb42-8d6a-5d43-08df0d54e23c
ms06-071-security-update-for-microsoft-xml-core-services-4-0-134d3572-d605-89e8-d967-45327a1f846a



5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.