mfcm140u.dll

MFC Managed Library - Retail Version file version info

Library on Windows 2 known copies with hashes

Is it the real mfcm140u.dll?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\System\
C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\

Signed byMicrosoft Corporation

ProductMicrosoft Visual Studio 2017, Microsoft Corporation

DescriptionMFC Managed Library - Retail Version

2 known copies

14.16.27033.0 built by: vcwrkspc · C:\Program Files (x86)\Microsoft Office\root\vfs\SystemX86\mfcm140u.dll · signed by Microsoft Corporation

7a64710ec2e5facb70ec09b0b4dcb47ed1643ae4dbda7c77501fbf8ff14c0173

14.16.27033.0 built by: vcwrkspc · C:\Program Files (x86)\Microsoft Office\root\vfs\System\mfcm140u.dll · signed by Microsoft Corporation

e53b532f83607b18c4062528c423039123073796780a92cbba8814a658906278

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.