Should I block it?

No, this file is 100% safe to run.

Additional versions

6.3.9600.16384 (winblue_rtm.130821-1623)	0.07%
6.3.9600.16384 (winblue_rtm.130821-1623)	0.07%
6.2.9200.16384 (win8_rtm.120725-1247)	0.13%
6.2.9200.16384 (win8_rtm.120725-1247)	0.07%
6.1.7600.16385 (win7_rtm.090713-1255)	0.20%
6.1.7600.16385 (win7_rtm.090713-1255)	0.33%
6.0.6000.16386 (vista_rtm.061101-2205)	0.07%
6.0.6000.16386 (vista_rtm.061101-2205)	0.07%
5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)	0.07%
15.0.4454.1000	0.91%
15.0.4454.1000	4.70%
15.0.4433.1506	0.07%
15.0.4420.1017	1.57%
15.0.4420.1017	1.37%
15.0.4128.1022	1.17%
15.0.4128.1019	0.07%
15.0.4128.1014	0.59%
15.0.4128.1014	0.20%
14.0.4730.1010	36.46%
14.0.4730.1010	3.39%
14.0.4730.1010	0.07%
14.0.4730.1010	0.07%
12.0.6413.1000	0.20%
12.0.4518.1014	38.36%
12.0.4518.1014	0.07%
11.0.5525	9.72%

Relationships

services.exe (Services and Controller app by Microsoft)

PE file structure

Show functions

Import table

advapi32.dll

RegEnumValueW, CryptReleaseContext, CryptAcquireContextW, SetFileSecurityW, RegDeleteKeyW, OpenThreadToken, CheckTokenMembership, ConvertStringSecurityDescriptorToSecurityDescriptorW, LookupAccountNameW, AllocateAndInitializeSid, FreeSid, CryptHashData, CryptGetHashParam, CryptCreateHash, CryptDestroyHash, RegisterServiceCtrlHandlerW, RegCloseKey, RegEnumKeyExW, RegCreateKeyExW, RegOpenKeyExW, RegSetValueExW, SetThreadToken, RegQueryValueExW, RegNotifyChangeKeyValue, SetServiceStatus, StartServiceCtrlDispatcherW, DuplicateToken, RegDeleteValueW

kernel32.dll

FormatMessageA, GetComputerNameW, GetModuleHandleA, GetStartupInfoA, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, QueryPerformanceCounter, GetCurrentThreadId, GetCurrentProcessId, HeapAlloc, GetProcessHeap, HeapReAlloc, HeapFree, HeapSize, RaiseException, LoadLibraryA, MoveFileExW, GetLastError, GetModuleFileNameW, CloseHandle, SetEvent, InterlockedIncrement, InterlockedDecrement, lstrlenW, GetDriveTypeW, GetLogicalDrives, lstrcmpW, DeleteCriticalSection, LeaveCriticalSection, EnterCriticalSection, Sleep, ExitProcess, InitializeCriticalSection, GetCommandLineW, GetTickCount, ReleaseMutex, ResetEvent, WaitForMultipleObjectsEx, SetErrorMode, CreateEventW, CreateMutexW, CreateProcessW, GetSystemInfo, InterlockedExchange, CreateFileA, ReadFile, SetFilePointer, DosDateTimeToFileTime, MultiByteToWideChar, FreeLibrary, GetProcAddress, LoadLibraryW, WideCharToMultiByte, CreateFileW, ReleaseSemaphore, WaitForSingleObject, WaitForMultipleObjects, CreateThread, CreateSemaphoreW, VirtualFree, VirtualAlloc, SetFilePointerEx, GetSystemTimeAsFileTime, SystemTimeToFileTime, GetSystemTime, SetFileTime, SetEndOfFile, WriteFile, GlobalFree, GlobalAlloc, GetFileAttributesExW, GetFileSizeEx, FindClose, FindFirstFileW, GetFileAttributesW, CopyFileW, CreateHardLinkW, SetFileAttributesW, DeleteFileW, GetTempPathA, GetTempPathW, GetFileTime, FindNextFileW, LocalFree, GetCurrentThread, CreateDirectoryW, RemoveDirectoryW, lstrlenA, SystemTimeToTzSpecificLocalTime, GetTimeZoneInformation, LocalAlloc

msvcrt.dll

DllMain

rpcrt4.dll

RpcImpersonateClient, RpcRevertToSelf, RpcServerUnregisterIf, RpcServerUseProtseqEpW, RpcServerRegisterIfEx, NdrServerCall2

ose.exe

Office Source Engine by Microsoft Corporation (Signed)

Remove ose.exe

Version:	14.0.4730.1010
MD5:	9d10f99a6712e28f8acd5641e3a7ea6b
SHA1:	835e982347db919a681ba12f3891f62152e50f0d
SHA256:	70964a0ed9011ea94044e15fa77edd9cf535cc79ed8e03a3721ff007e69595cc

Overview

ose.exe runs as a service under the name Office Source Engine (ose) with extensive SYSTEM privileges (full administrator access). It is installed with a couple of know programs including NVIDIA PhysX published by NVIDIA Corporation and Microsoft Visio 2010 published by Microsoft Corporation. The file is digitally signed by Microsoft Corporation.

Details

File name:	ose.exe
Publisher:	Microsoft Corporation
Product name:	Office Source Engine
Typical file path:	C:\Program Files\common files\microsoft shared\source engine\ose.exe
File version:	14.0.4730.1010
Size:	145.85 KB (149,352 bytes)
Certificate
Issued to:	Microsoft Corporation
Authority (CA):	Microsoft Corporation
Effective date:	Monday, December 7, 2009
Expiration date:	Monday, March 7, 2011
Digital DNA
PE subsystem:	Windows GUI
Entropy:	6.564145
File packed:	No
Code language:	Microsoft Visual C++
.NET CLR:	No

More details

Programs

The following programs will install this file

Microsoft Visio 2010

Microsoft Corporation

8% remove

NVIDIA PhysX

NVIDIA Corporation

3% remove

PhysX is a proprietary realtime physics engine middleware SDK. Video games supporting hardware acceleration by PhysX can be accelerated by either a PhysX PPU or a CUDA-enabled GeForce GPU offloading physics calculations from the CPU, allowing it to perform other tasks instead. This typically results in a smoother gaming experience and additional visual effects.

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'ose' (Office Source Engine)
'ose64' (Office 64 Source Engine)
ose64
'ose'

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00065700%	0.028634%
Kernel CPU:	0.00049544%	0.013761%
User CPU:	0.00016156%	0.014873%
Kernel CPU time:	47 ms/min	100,923,805ms/min
Memory
Private memory:	1.43 MB	21.59 MB
Private (maximum):	3.67 MB
Private (minimum):	3.62 MB
Non-paged memory:	1.43 MB	21.59 MB
Virtual memory:	23.42 MB	140.96 MB
Virtual memory (peak):	25.92 MB	169.69 MB
Working set:	3.62 MB	18.61 MB
Working set (peak):	3.68 MB	37.95 MB
Resource allocations
Threads:	4	12
Handles:	76	600

Process properties

Integrety level:	System
Platform:	64-bit
Command line:	"C:\Program Files\common files\microsoft shared\source engine\ose.exe"
Owner:	SYSTEM
Windows Service
Service name:	ose
Display name:	Office Source Engine
Description:	“Saves installation files used for updates and repairs and is required for the downloading of Setup updates and Watson error reports.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads