home

MSO.DLL

2007 Microsoft Office system

Microsoft Corporation

The MSO component for Microsoft Office provides most of the underlying common API functionality of the platform. The library is part of Microsoft Office 2007. The file has been seen being downloaded from jerryching.no-ip.org and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
2007 Microsoft Office system

Description:
2007 Microsoft Office component

Version:
12.0.6425.1000

MD5:
af5375c139fe744532a9ae794b890ee6

SHA-1:
162fc982c81535028369c9693538d8b480785b1e

SHA-256:
7a19de3f0ace5937e3e7a038f0f6c715fd043d4b8a5433c504162623864ec614

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/28/2024 1:04:04 AM UTC  (today)

File size:
16.5 MB (17,314,688 bytes)

Product version:
12.0.6425.1000

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

Original file name:
MSO.DLL

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\common files\microsoft shared\office12\mso.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/22/2008 11:24:55 PM

Valid to:
1/22/2010 10:34:55 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61062781000000000008

File PE Metadata
Compilation timestamp:
4/3/2009 8:24:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
393216:fGo/y8uGG/g8TPUubgXNM100LcxOunzFGA19WF:fGoa8y7gXNM1ynzE89

Entry address:
0xDF6B31

Entry point:
8B, FF, 55, 8B, EC, 53, 8B, 5D, 0C, 83, FB, 01, 56, 57, 75, 68, 0F, 31, A3, B0, F4, 52, 33, FF, 15, 2C, 15, 60, 32, 25, 00, 00, 00, 80, B9, 90, F4, 52, 33, A3, A8, F4, 52, 33, E8, 45, D5, FF, FF, 85, C0, 0F, 8C, 95, 00, 00, 00, 33, FF, 39, 3D, E0, F4, 52, 33, 76, 25, BE, C4, F4, 52, 33, 8D, 4E, 04, E8, 26, D5, FF, FF, 85, C0, 7C, 7A, C7, 06, 00, 00, 00, 00, 83, C7, 01, 83, C6, 1C, 3B, 3D, E0, F4, 52, 33, 72, E0, E8, 62, D4, FF, FF, 85, C0, 7C, 5D, C7, 45, 0C, 00, 00, 00, 00, 8B, 45, 10, 8B, 4D, 08, 50, 53...
 
[+]

Entropy:
6.6303

Code size:
14.4 MB (15,137,280 bytes)

The file MSO.DLL has been seen being distributed by the following 2 URLs.

http://jerryching.no-ip.org/Software/Microsoft/.../MSO.DLL

http://download2228.mediafire.com/biuq9xe7jizg/.../MSO.DLL

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.