home

osdsetupwizard.exe

Wizard Shell

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Wizard Shell

Version:
1.0.1202.24

MD5:
3d616a02a8e9dd2a862b5b76b900f273

SHA-1:
f5bc96987a79d6925f767e67e35bd97f731c169c

SHA-256:
5508bd83da9cf21f07f9b2e3b70311e7d9af68b8906c6949a18a5c70c0102bba

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
5/11/2024 2:06:28 AM UTC  (today)

File size:
511.1 KB (523,352 bytes)

Product version:
1.0.1202.24

Copyright:
© 2011 Microsoft Corporation. All rights reserved.

Trademarks:
Microsoft® is a registered trademark of Microsoft Corporation.

Original file name:
WizardShell.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\windows 8\deploy\tools\x64\osdsetupwizard.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/10/2011 3:32:25 PM

Valid to:
1/10/2013 2:32:25 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6119CC93000100000066

File PE Metadata
Compilation timestamp:
6/4/2012 7:57:31 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x33FEC

Entry point:
48, 83, EC, 28, E8, 4F, 04, 00, 00, 48, 83, C4, 28, E9, 26, FD, FF, FF, FF, 25, 9C, 74, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 83, EC, 10, 4C, 89, 14, 24, 4C, 89, 5C, 24, 08, 4D, 33, DB, 4C, 8D, 54, 24, 18, 4C, 2B, D0, 4D, 0F, 42, D3, 65, 4C, 8B, 1C, 25, 10, 00, 00, 00, 4D, 3B, D3, 73, 16, 66, 41, 81, E2, 00, F0, 4D, 8D, 9B, 00, F0, FF, FF, 41, C6, 03, 00, 4D, 3B, D3, 75, F0, 4C, 8B, 14, 24, 4C, 8B, 5C, 24, 08, 48, 83, C4...
 
[+]

Entropy:
5.7384

Code size:
229.5 KB (235,008 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.