ocsetapi.dll

  • File Path: C:\Windows\SysWOW64\ocsetapi.dll
  • Description: Windows Optional Component Setup API

Hashes

Type Hash
MD5 C21C76EB69C2341726564264A28E8B8B
SHA1 2DDE459F5EB96990F431B60D0821A810786ADD98
SHA256 613C838452DE541F04CA0DE9396DCBFE6D9018E902C7B30A5760F4EE2838DBC2
SHA384 15CA8695F4223A3C872B8ED9D3328B3E67587D388287BF2BB90333F5FBF6DE6E9BBD34854A27E24781E1EE5EACF2AD52
SHA512 9D475FB40F087AA92E4D16DBE6458672AF4B86A54F596B7CCC3F8158A356B2B9B247752856FA589C0723341C9A41588F100BA0EE89A520E5834F933F6447E6AB
SSDEEP 3072:nrENnKKphw6s4RTQcWl4KEmTwSSQ5NBXiDpDejhfPVv12Q:nr8nRccMxTcQ5cDeFP
IMP A70353EFA431EE60F0319D152AB40EB6
PESHA1 B187F8486920F63B3AED52C6447DFCFD43E90F3D
PE256 728270A319E5C2758FB21DDC32AAACB924145A8E01EA6B403C9484DDCF9261A8

DLL Exports:

Function Name Ordinal Type
RemoveMspFilesFromSystemMsiCache 2 Exported Function
CopyMspFilesToSystemMsiCache 1 Exported Function

Signature

  • Status: Signature verified.
  • Serial: 3300000266BD1580EFA75CD6D3000000000266
  • Thumbprint: A4341B9FD50FB9964283220A36A1EF6F6FAA7840
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: ocsetapi.dll
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.19041.1 (WinBuild.160101.0800)
  • Product Version: 10.0.19041.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 32-bit

File Scan

  • VirusTotal Detections: 0/62
  • VirusTotal Link: https://www.virustotal.com/gui/file/613c838452de541f04ca0de9396dcbfe6d9018e902c7b30a5760f4ee2838dbc2/detection/

File Similarity (ssdeep match)

File Score
C:\windows\SysWOW64\PkgMgr.exe 49
C:\Windows\SysWOW64\PkgMgr.exe 49
C:\Windows\SysWOW64\PkgMgr.exe 54
C:\Windows\SysWOW64\PkgMgr.exe 47
C:\WINDOWS\SysWOW64\PkgMgr.exe 49
C:\WINDOWS\SysWOW64\PkgMgr.exe 47
C:\Windows\SysWOW64\wusa.exe 41

MIT License. Copyright (c) 2020-2021 Strontic.