la57setup.exe

  • File Path: C:\WINDOWS\system32\la57setup.exe
  • Description: LA57 Setup

Hashes

Type Hash
MD5 794AA6BEF40207398516EA0BE3AAA09D
SHA1 48ACF05295E17B58C00CC36FB10E446164CD964D
SHA256 58A4ED7D6A0373EDA1F5EC86135382F46E53B7BA58F56E12D53206ADC4843EF8
SHA384 52029E89F71AED1B3BB206EBED5F04374DA2641BBBF4050494005B508642E81760B05485EC749CA9B888526C485A1338
SHA512 69EA0C59F50941C7BD22BA2B9C88D90A6A928F1B6AA529EF5C332308B8D9ACF012E067298806A618A56C56F8FAB8924F0C460A7EE78402ADE0E0C220C88373CA
SSDEEP 192:RTKcMUjfEpV1bjDZ9Ovld1GQpaavE7aw9EIFUtmOlW5xW:nMRV1bjVARojVtUMgW5xW
IMP 8CE020B70129BE8DF831F266C9B81FBF
PESHA1 A51F68169E216727E6F6EA98CB9C445609AAB8AC
PE256 3B9BC5193A64731F11EDEE6FEB13BE15106634AF021BFE84AE66E18853312D3A

Runtime Data

Usage (stdout):

5-level paging is not supported on this platform. If present, the Windows
feature package must be removed.
The Windows feature package for 5-level paging has been removed; a reboot may
be required to complete the operation.

Child Processes:

conhost.exe DismHost.exe

Open Handles:

Path Type
(R-D) C:\Windows\System32\Dism\en-US\DismCore.dll.mui File
(R-D) C:\Windows\System32\Dism\en-US\DismProv.dll.mui File
(R-D) C:\Windows\System32\Dism\en-US\FfuProvider.dll.mui File
(R-D) C:\Windows\System32\Dism\en-US\VhdProvider.dll.mui File
(R-D) C:\Windows\System32\Dism\en-US\WimProvider.dll.mui File
(R-D) C:\Windows\System32\en-US\DismApi.dll.mui File
(R-D) C:\Windows\System32\en-US\KernelBase.dll.mui File
(R-D) C:\Windows\System32\en-US\la57setup.exe.mui File
(R-D) C:\Windows\System32\en-US\netmsg.dll.mui File
(RW-) C:\Windows\Logs\DISM\dism.log File
(RW-) C:\Windows\System32 File
\BaseNamedObjects__ComCatalogCache__ Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db Section
\BaseNamedObjects\C:*ProgramData*Microsoft*Windows*Caches*cversions.2.ro Section
\BaseNamedObjects\SetupLogSection Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_1252_3_2_0_0 Section
\Sessions\2\BaseNamedObjects\NLS_CodePage_437_3_2_0_0 Section

Loaded Modules:

Path
C:\WINDOWS\System32\KERNEL32.DLL
C:\WINDOWS\System32\KERNELBASE.dll
C:\WINDOWS\system32\la57setup.exe
C:\WINDOWS\SYSTEM32\ntdll.dll

Signature

  • Status: Signature verified.
  • Serial: 33000002ED2C45E4C145CF48440000000002ED
  • Thumbprint: 312860D2047EB81F8F58C29FF19ECDB4C634CF6A
  • Issuer: CN=Microsoft Windows Production PCA 2011, O=Microsoft Corporation, L=Redmond, S=Washington, C=US
  • Subject: CN=Microsoft Windows, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

File Metadata

  • Original Filename: la57setup.dll.mui
  • Product Name: Microsoft Windows Operating System
  • Company Name: Microsoft Corporation
  • File Version: 10.0.22000.1 (WinBuild.160101.0800)
  • Product Version: 10.0.22000.1
  • Language: English (United States)
  • Legal Copyright: Microsoft Corporation. All rights reserved.
  • Machine Type: 64-bit

File Scan

  • VirusTotal Detections: 0/72
  • VirusTotal Link: https://www.virustotal.com/gui/file/58a4ed7d6a0373eda1f5ec86135382f46e53b7ba58f56e12d53206adc4843ef8/detection

MIT License. Copyright (c) 2020-2021 Strontic.