BHOINTL.DLL
URL Redirector Pluggable UI file version info
Library on Windows 2 known copies with hashes
Is it the real BHOINTL.DLL?
Installed in
C:\Program Files (x86)\Microsoft Office\root\Office16\1033\C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\1033\Signed byMicrosoft Corporation
ProductMicrosoft Office, Microsoft Corporation
DescriptionURL Redirector Pluggable UI
2 known copies
16.0.11231.20022 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\1033\BHOINTL.DLL · signed by Microsoft Corporation
be8cb9463c6d6eaf000dfbda0bbb08e71d2cc59cc1b8ae15743fedb16c59515316.0.11231.20022 · C:\Program Files (x86)\Microsoft Office\root\Office16\1033\BHOINTL.DLL · signed by Microsoft Corporation
c72c8be509609634dbeb132d8192239b75dcf09f937de8698b6199b3837870caFrom the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.