MSOXMLED.EXE

  • File Path: C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\MSOXMLED.EXE
  • Description: Office XML Handler

Hashes

Type Hash
MD5 4DF1F818408AF6CE87A502FB7BCAE853
SHA1 D1A7CF8708D5B6427D4E7D05F5F27C67F01F2E27
SHA256 E21026CA18E5BFFD8449A301BCF015A5D2A06B08F526DD8DB2683BD3C8E9871B
SHA384 E8E0742B7B4F1CD48AA68366A2A9ECD741A18DC00595A5DEF8E31FFADD75B8ED1D86210C65E775AF5A81D4DF48EBB7AA
SHA512 AC0101364B708923800CF81564B95529582A4A7B9F7CAE850AF26DA9F85A3243B97BB776EA7FE321EC7E168EDFDDC066D016581A6E98E4551D614CE3358C7034
SSDEEP 1536:S9OR8VgtHFCT7xI6vxIMitf9Vnl1ly/UtJRaCAd1uhNRwGCZrb:r9tHFCRLxIjfJlTy/6APH
IMP 22110DB406AF3F3C6AEB83D9CD0B41DA
PESHA1 A9F34EEDB01862D1178071EF99D08A311381E881
PE256 FF6E082830B187F81D3CAAD1FD92029298F1FB3C36F1B76206AA2537489ED4DB

Runtime Data

Loaded Modules:

Path
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE16\MSOXMLED.EXE
C:\Windows\SYSTEM32\ntdll.dll
C:\Windows\System32\wow64.dll
C:\Windows\System32\wow64cpu.dll
C:\Windows\System32\wow64win.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002CF6D2CC57CAA65A6D80000000002CF
  • Thumbprint: 1A221B3B4FEF088B17BA6704FD088DF192D9E0EF
  • Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: msoxmled.exe
  • Product Name: Microsoft Office InfoPath
  • Company Name: Microsoft Corporation
  • File Version: 16.0.12430.20120
  • Product Version: 16.0.12430.20120
  • Language: Language Neutral
  • Legal Copyright:
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/73
  • VirusTotal Link: https://www.virustotal.com/gui/file/e21026ca18e5bffd8449a301bcf015a5d2a06b08f526dd8db2683bd3c8e9871b/detection/

File Similarity (ssdeep match)

File Score
C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLED.EXE 44

MIT License. Copyright (c) 2020-2021 Strontic.