CmdID

CmdID / Files

mfc140.dll

MFCDLL Shared Library - Retail Version file version info

Library on Windows 2 known copies with hashes

Is it the real mfc140.dll?

file version info and known copies
Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\System\
C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\
Signed byMicrosoft Corporation
ProductMicrosoft Visual Studio 2017, Microsoft Corporation
DescriptionMFCDLL Shared Library - Retail Version

2 known copies

14.16.27033.0 built by: vcwrkspc · C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\mfc140.dll · signed by Microsoft Corporation

7e3fb1a181de8370312bb602f3f01b2d2b91e77b76726fe37a103866061aa635

14.16.27033.0 built by: vcwrkspc · C:\Program Files (x86)\Microsoft Office\root\vfs\System\mfc140.dll · signed by Microsoft Corporation

fb4af03be3a3edb27663f32cac669441498544ffcf259cb4e56f4b80718892af

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.