MSOXEV.DLL

Office XML Handler file version info

Library on Windows 2 known copies with hashes

Is it the real MSOXEV.DLL?

file version info and known copies

Installed inC:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\

Signed byMicrosoft Corporation

ProductMicrosoft Office InfoPath, Microsoft Corporation

DescriptionOffice XML Handler

2 known copies

16.0.12430.20120 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXEV.DLL · signed by Microsoft Corporation

344dfb150a63082140a06f2f3e9da567961a8bb1b4c92e3a80a255ddf36371b6

16.0.12430.20076 · C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\MSOXEV.DLL · signed by Microsoft Corporation

ffffb5261f05582aa250c7f92793bdd3c78fa2de66cc87a121e048aaf007f136

From the file’s version info and the copies recorded by xCyclopedia (MIT). A copy in another folder, signed by someone else or with another hash is not necessarily malicious, but it is worth a closer look. In Ceplin, "<sha256>".whatis() says which known copy a hash is.