home

osetupui.dll

Microsoft Office 2013

Microsoft Corporation

This is the support library for the setup user interface used for installing Microsoft Office features. This version contains the Brazilian Portuguese localized resources.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2013

Description:
Microsoft Office 2013 component

Version:
15.0.4420.1017

MD5:
946898bdd95bba8582c6aa5da005a5d6

SHA-1:
4ec0414e2f243665cc06ee1e6fa8e728ac8e6552

SHA-256:
75749604bdfd0b5a320cdebedac02c44817f18627b0bcb0dc47b7b7f97bf138f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/30/2024 12:47:10 PM UTC  (today)

File size:
208.7 KB (213,664 bytes)

Product version:
15.0.4420.1017

Original file name:
osetupui.dll

File type:
Dynamic link library (Win64 DLL)

Language:
Brazilian Portuguese

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\osetupui.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/26/2012 5:50:41 PM

Valid to:
10/26/2013 6:50:41 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000088590E3C511FE26A67000100000088

File PE Metadata
Compilation timestamp:
9/29/2012 1:36:01 PM

OS version:
6.1

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
10.10

CTPH (ssdeep):
1536:veVx43kLWfXQVfREns40wYgYu2pdTGxkU9DhBqmTBRFIlDKUAir5DJ:vvqEn32bGxkU9dBqmVRFSKUAeDJ

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C0, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

The file osetupui.dll has been seen being distributed by the following URL.

ftp://hpc.dvrcam.net/Office/Office 2013/Office 2013 64/.../osetupui.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.