home

osetupui.dll

Microsoft Office 2013

Microsoft Corporation

This is the support library for the setup user interface used for installing Microsoft Office features. This version contains the Brazilian Portuguese localized resources.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft Office 2013

Description:
Microsoft Office 2013 component

Version:
15.0.4420.1017

MD5:
282d8d0646c5b1dd42ccc991b6eb4458

SHA-1:
dfa0889fa851a38b8813538106e4d227d4cc4c09

SHA-256:
b9d4f8bfda8224d50e2048569b8d658516c5b00375589060604cd025a13f8271

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
2/25/2025 8:47:26 AM UTC  (today)

File size:
208.6 KB (213,640 bytes)

Product version:
15.0.4420.1017

Original file name:
osetupui.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Brazilian Portuguese

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\osetupui.dll

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/26/2012 5:50:41 PM

Valid to:
10/26/2013 6:50:41 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000088590E3C511FE26A67000100000088

File PE Metadata
Compilation timestamp:
9/29/2012 1:14:44 PM

OS version:
6.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.10

CTPH (ssdeep):
1536:v0Vx43kLWfXQVfREns40wYgYu2pdTGxkU9DhBqmTBRFIlDKUAir5DiQ:v5qEn32bGxkU9dBqmVRFSKUAeDiQ

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, C0, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

The file osetupui.dll has been seen being distributed by the following URL.

ftp://assistek.no-ip.info/Programas/Microsoft Office 2013/Microsoft Office 2013 x86/.../osetupui.dll

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.