home

mlshext.dll

Microsoft Office Outlook

Microsoft Corporation

The library is part of Microsoft Office 2007. This is installed with multiple programs including Microsoft Office Personal 2007 and Microsoft Office Outlook 2007 Trial. The file has been seen being downloaded from mail-attachment.googleusercontent.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office Outlook

Description:
Microsoft Shell Extension Library

Version:
12.0.6500.5000

MD5:
44362d363c21bbaabca8cb42d14b05e2

SHA-1:
699220c0b3c21f462717178a8ef662c5f74836ff

SHA-256:
b2069bc2652af591dc7691768768d5e5191b5ef5c2932d685bf36672cf2334f6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 3:29:35 AM UTC  (today)

File size:
19.9 KB (20,352 bytes)

Product version:
12.0.6500.5000

Copyright:
© 2006 Microsoft Corporation. All rights reserved.

Original file name:
mlshext.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\microsoft office\office12\mlshext.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/22/2008 5:24:55 PM

Valid to:
1/22/2010 4:34:55 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61062781000000000008

File PE Metadata
Compilation timestamp:
2/26/2009 6:39:49 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

CTPH (ssdeep):
384:cXDsjv3GO7wddSUrPZp2XDxjv87MQDWai6uW1PeLz4qjpvpG:asjv3G4wdR7ZKxu3Mz4qjpvQ

Entry address:
0x251E

Entry point:
83, 7C, 24, 08, 01, 75, 05, E8, 31, FC, FF, FF, FF, 74, 24, 04, 8B, 4C, 24, 10, 8B, 54, 24, 0C, E8, CD, FE, FF, FF, 59, C2, 0C, 00, 68, 93, 25, 9A, 38, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 70, 13, 9A, 38, 31, 45, FC, 33, C5, 89, 45, E4, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, E4, 33, CD, E8, 7E, FC, FF, FF, EB, 68, FF, 74, 24, 10, FF, 74, 24, 10, FF, 74, 24...
 
[+]

Entropy:
6.3887

Code size:
8.5 KB (8,704 bytes)

Approved Shell Extension
Name:
Microsoft Office Outlook Desktop Icon Handler

CLSID:
{00020d75-0000-0000-c000-000000000046}

CLSID name:
Microsoft Office Outlook


Safe for Initializing Control
CLSID:
{18A295DA-088E-42D1-BE31-5028D7F9B9B5}

CLSID name:
Office Viewer ActiveX Control


Safe for Scripting Control
Name:
{18A295DA-088E-42D1-BE31-5028D7F9B9B5}


The file mlshext.dll has been discovered within the following programs.

Microsoft Office Accounting 2008 Equifax Addin  by Microsoft Corporation
Publisher's description - “Equifax is a popular Web-based credit reporting agency used by consumers and businesses.”
office.microsoft.com
9% remove it
Microsoft Office Accounting 2008 Fixed Asset Manager  by Microsoft Corporation
Publisher's description - “Using Fixed Asset Manager, you can add new fixed assets, dispose assets, and calculate and and post depreciation into Microsoft Office Accounting 2008. A fixed asset is property used for the production of income that has an estimated life of more than one year.”
www.microsoft.com
10% remove it
Microsoft Office Accounting 2008 PayPal Addin  by Microsoft Corporation
Publisher's description - “PayPal is a popular Web-based payment method used by consumers and small businesses. When you install and enable the PayPal Payments add-in, you will be able to add a customized PayPal button to your e-mail invoices and invoice templates.”
11% remove it
Microsoft Office Outlook 2007 Trial  by Microsoft Corporation
1% remove it
Microsoft Office Personal 2007  by Microsoft Corporation
1% remove it
Microsoft Office Small Business Connectivity Components  by Microsoft Corporation
Publisher's description - “Through Business Connectivity Services Rich Client Extensions, users can interact with external systems from the following Microsoft Office 2010 client applications: Outlook 2010, Word 2010, SharePoint Workspace 2010, Microsoft InfoPath 2010, and Microsoft Access 2010.”
9% remove it
 
Powered by Should I Remove It?

The file mlshext.dll has been seen being distributed by the following 3 URLs.

https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=12c0223cd3&view=att&th=1446f88ac6f8ac93&attid=0.1&disp=safe&zw&saduie=AG9B_P_q9QeULH_rnRTLduYy4tms&sadet=1393534702411&sads=l2aidbTWlmWZNaZmkuxEmNZQlgg&sadssc=1

https://mail-attachment.googleusercontent.com/attachment/u/.../?ui=2&ik=12c0223cd3&view=att&th=1446f88ac6f8ac93&attid=0.1&disp=safe&zw&saduie=AG9B_P_q9QeULH_rnRTLduYy4tms&sadet=1393534702411&sads=l2aidbTWlmWZNaZmkuxEmNZQlgg

https://mail.google.com/mail/u/.../?ui=2&ik=12c0223cd3&view=att&th=1446f88ac6f8ac93&attid=0.1&disp=safe&zw

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.