MSOSYNC.EXE
- File Path:
C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE
- Description: Microsoft Office Document Cache
Hashes
| Type |
Hash |
| MD5 |
2D69761F474DFA1E716D0577DED6464F |
| SHA1 |
56CD5BC2E80CCA1367D8A8CA3D574AC6BD5AD9AE |
| SHA256 |
7723EBF09EEB6C6B781996D6BC91F4D0528D3D2160E7CA20BBC6CCE38263986E |
| SHA384 |
8DDC036CE5E54C63D439EF1BADE0B88D4084E1E7899A6A007DBFB3C9EAF15BBBADBE4CEEB27E2882D7115554848EFA93 |
| SHA512 |
09D9BA9701CD75A2A5482EFAEDB600E5A58F3B51ECD7AD7CAD87733ADAE2FFB5C1F8BAC89DEDDC766D390D5E7EA772BB1E08D0C0D52CBE7D720F4CED1639B6B2 |
| SSDEEP |
3072:LhOJ+nO1xL+IpomXl1Ni6bj7gF6CQNpbwM:L4J4O19+Ihl1Ni633ZAM |
| IMP |
0046A48946C164A917097B6D684CD255 |
| PESHA1 |
2F030B85A7250BE3D9A772075CD2B41182F5FDDF |
| PE256 |
F1089981395B5B9CD4E637AA595243D4C2E720282F9F54EAADBCA0294B798559 |
Runtime Data
Window Title:
Microsoft Office Sync Process Tooltip
Open Handles:
| Path |
Type |
| (—) C:\Users\user\AppData\Local\Temp\JET9D72.tmp |
File |
| (R–) C:\ProgramData\Microsoft\Office\ClickToRunPackageLocker |
File |
| (R-D) C:\Windows\Fonts\StaticCache.dat |
File |
| (RW-) C:\Users\user\AppData\Local\Microsoft\Office\16.0\OfficeFileCache\CentralTable.accdb |
File |
| (RW-) C:\Users\user\AppData\Local\Microsoft\Office\16.0\OfficeFileCache\CentralTable.laccdb |
File |
| (RW-) C:\Users\user\Documents |
File |
| (RW-) C:\Windows |
File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.19041.488_none_11b1e5df2ffd8627 |
File |
| (RW-) C:\Windows\WinSxS\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.19041.508_none_429cdbca8a8ffa94 |
File |
| \BaseNamedObjects__ComCatalogCache__ |
Section |
| \BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 |
Section |
| \BaseNamedObjects\NLS_CodePage_437_3_2_0_0 |
Section |
| \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_RTS:{00005173-0666-0667-A11E-728100000000} |
Section |
| \Sessions\1\BaseNamedObjects\Microsoft_Office_16CSI_SPM:{70B0383A-6C4A-4BA1-B5F4-8F22F820BFF3} |
Section |
| \Sessions\1\BaseNamedObjects\windows_shell_global_counters |
Section |
| \Sessions\1\Windows\Theme64749523 |
Section |
| \Windows\Theme1120315852 |
Section |
Loaded Modules:
| Path |
| C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSYNC.EXE |
| C:\Windows\SYSTEM32\ntdll.dll |
| C:\Windows\System32\wow64.dll |
| C:\Windows\System32\wow64cpu.dll |
| C:\Windows\System32\wow64win.dll |
Signature
- Status: Signature verified.
- Serial:
33000002CE7C9ACE7D905ED2B70000000002CE
- Thumbprint:
B10607FB914700B40F794610850C1DE0A21566C1
- Issuer: CN=Microsoft Code Signing PCA 2010, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Subject: CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
- Original Filename: msosync.exe
- Product Name: Microsoft Office
- Company Name: Microsoft Corporation
- File Version: 16.0.12527.20482
- Product Version: 16.0.12527.20482
- Language: Language Neutral
- Legal Copyright:
- Machine Type: 32-bit
File Scan
- VirusTotal Detections: 0/72
- VirusTotal Link: https://www.virustotal.com/gui/file/7723ebf09eeb6c6b781996d6bc91f4d0528d3d2160e7ca20bbc6cce38263986e/detection/
MIT License. Copyright (c) 2020-2021 Strontic.