home

osdsetupwizard.exe

Wizard Shell

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Wizard Shell

Version:
1.0.1202.24

MD5:
1914dfd5e46e726712aa4ce3f59c6a9e

SHA-1:
3a7f5221c2aca621ab021681eac59906a3132198

SHA-256:
e75a888c6f0298666a99cdcf5bf5e510f569f8b2d382053f3948bd98162b1760

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/24/2024 11:55:18 PM UTC  (a few moments ago)

File size:
434.1 KB (444,504 bytes)

Product version:
1.0.1202.24

Copyright:
© 2011 Microsoft Corporation. All rights reserved.

Trademarks:
Microsoft® is a registered trademark of Microsoft Corporation.

Original file name:
WizardShell.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\windows 8\deploy\tools\x86\osdsetupwizard.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/10/2011 3:32:25 PM

Valid to:
1/10/2013 2:32:25 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6119CC93000100000066

File PE Metadata
Compilation timestamp:
6/4/2012 7:55:49 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x30AB8

Entry point:
E8, 36, 05, 00, 00, E9, 6B, FD, FF, FF, FF, 25, 50, 82, 43, 00, CC, CC, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF, 75, 08, 68, 99, 06, 43, 00, 68, 1C, B0, 44, 00, E8, 9E, 05, 00, 00, 83, C4, 18, 5D, C3, CC, FF, 25, 54, 82, 43, 00, CC, CC, CC, CC, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 0F, 03, C1, 1B, C9, 0B, C1, 59, E9, 8A, 05, 00, 00, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 07, 03, C1, 1B, C9, 0B, C1, 59, E9, 74, 05, 00, 00, FF, 25, 58, 82, 43, 00, 50, 64, FF, 35, 00, 00...
 
[+]

Entropy:
6.0478

Code size:
216.5 KB (221,696 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.