The MSO DLL Microsoft Corporation File Malware Analysis
Gridinsoft Logo
File Icon

The MSO.DLL File Analysis

Updated 3 days ago
Checked by Malware Check
MSO.DLL

Technical Analysis

File Name MSO.DLL
File Type
PE32 executable (DLL) (console) Intel 80386, for MS Windows
Scanner Version 1.0.223.174
Database Version 2025-08-25 21:00:48 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
29,673,336
File Size (bytes)
2025-08-25
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
0d80a10d3205eacf8a7c3e28c6681ab3
SHA1
5688d3ad77e8b4f7f9e355e224f1d0bf5d9c17df
SHA256
f9565fce0187df215865d88b1ea503a91269065392b8de6be96215173ad4d74f
SHA512
38e7432c611804121c68728ab4e6936f5ceb3a876071a55e06068a19e93cd57d079253b07fc0ac831d974847529beb646c3beabf70a1cba3f4c1e94dfce73a0f
ImpHash
34c5336b4c2dff2e0063dd0f138e3010

PE Analysis

Basic Information

▼
Icon
Hash: 5f94b95007880b3f19d43ffec7d49425
Fuzzy: f3f5c220b4667001ff0764453ac23c10
dHash: e0c8cec6c6c6c8e0
Image Base 0x10000000
Entry Point 0x100010f1
Compilation Time 2025-08-21 05:03:28
Checksum 0x01c53fa8 (Actual: 0x01c538c0)
OS Version 6.1
PEiD Signatures PE32 executable (DLL) (console) Intel 80386, for MS Windows
PDB Path d:\dbs\el\omr\target\x86\ship\msodll_99\x-none\MSO.pdb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
Digital Signature OK
Imports 4 libraries
KERNEL32, Mso98Win32Client, Mso50Win32Client, mso40uiWin32Client
Exports 7686 functions
Resources 67 Resources
Sections 11 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription Microsoft Office component
FileVersion 16.0.19220.20000
InternalName MSO
LegalTrademarks1 Microsoft® is a registered trademark of Microsoft Corporation.
LegalTrademarks2 Windows® is a registered trademark of Microsoft Corporation.
OriginalFilename MSO.dll
ProductName Microsoft Office
ProductVersion 16.0.19220.20000
Translation 0x0409 0x04e4

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 21,473,599 bytes 21,473,792 bytes 6.69 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B85411768064A7C03A544900D4D47E16
.rdata 0x0147c000 5,295,224 bytes 5,295,616 bytes 5.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D90C718521914188398E429400E41254
.data 0x01989000 558,773 bytes 474,624 bytes 4.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 293D6AD4941E014CB6A546F1E6B875A5
dadmeta 0x01a12000 1,248 bytes 1,536 bytes 4.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E42F655F31AB5FF31392091DB82F7C6A
.detourc 0x01a13000 4,528 bytes 4,608 bytes 4.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 60596353E15E6F0F10E7E1EF24A9A0E9
ofscur 0x01a15000 872 bytes 1,024 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E17954016E1C6294C0EBF39A1997F6A1
sdmprc 0x01a16000 1,904 bytes 2,048 bytes 7.22 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AA1E1E00F3070F4FB8B221D959CAD4B9
outfdsr 0x01a17000 528 bytes 1,024 bytes 3.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 5F2907B3121B5A36F9940FF2CA19CCF7
ctpltfrm 0x01a18000 4 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x01a19000 1,134,640 bytes 1,135,104 bytes 4.97 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1A3BE6C6ECD95A07863DB1F0A92E26DB
.reloc 0x01b2f000 1,260,924 bytes 1,261,056 bytes 6.72 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ CBEEBB6E8BDF926B0F54EF23AFEC9267
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 67 (1,130,898 bytes)
Resource Type Count Total Size Percentage
TYPELIB 1 520,788 bytes
46.1%
UIFILE 11 88,576 bytes
7.8%
WEVT_TEMPLATE 1 239,294 bytes
21.2%
RT_ICON 23 163,678 bytes
14.5%
RT_DIALOG 1 212 bytes
0%
RT_MESSAGETABLE 1 17,404 bytes
1.5%
RT_GROUP_ICON 1 328 bytes
0%
RT_VERSION 1 1,028 bytes
0.1%
RT_MANIFEST 1 607 bytes
0.1%
None 26 98,983 bytes
8.8%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware