home

mcpreinstall.exe

PreInstall Tool

McAfee Cat Cert

Publisher:
McAfee, Inc.  (signed by McAfee Cat Cert)

Product:
PreInstall Tool

Version:
1.00.0068

MD5:
f55dc7adcf2e2847beed65d2d42bbfda

SHA-1:
eae44b6a095da3fde4fc1e8216e3f3edb466aa5a

SHA-256:
d15e02c180ed151ad0ebd207c427f54ea4fe6f9b7f88b5f2f3936e67c05df106

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/23/2018 5:16:03 AM UTC  (today)

File size:
167.2 KB (171,168 bytes)

Product version:
1.00.0068

Copyright:
Copyright © 2010 McAfee, Inc.

Original file name:
McPre.68.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mcpreinstall.exe

Digital Signature
Signed by:
McAfee Cat Cert

Authority:
McAfee Cat Cert

Valid from:
7/20/2009 3:34:27 PM

Valid to:
12/31/2039 6:59:59 PM

Subject:
CN=McAfee Cat Cert

Issuer:
CN=McAfee Cat Cert

Serial number:
DE6DD1E0832BA69D45E77660747AF61C

File PE Metadata
Compilation timestamp:
2/14/2012 6:31:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:FuaiCs0m6sMuXVt5mz4DTdlEHuPKI/3aMNF/Ur:FiMJsLV1HESfaMNF/M

Entry address:
0x127C

Entry point:
68, 5C, 00, 41, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, F3, 8F, 19, 1D, 61, 02, 7C, 4E, B9, C8, 2C, CB, 00, BF, 90, 8A, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 43, 00, 06, 50, 83, 00, 50, 72, 65, 49, 6E, 73, 74, 61, 6C, 6C, 54, 6F, 6F, 6C, 00, 02, 00, 00, 00, 00, FF, CC, 31, 00, 10, 63, 2B, 29, 96, D0, 8F, 29, 41, BF, 54, 63, 67, 80, 55, 8A, 83, 74, EC, 44, FE, AF, E3, 9B, 4D, 8A, DA, F7, 61, 38, 4F, BB, 89, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Entropy:
6.3006

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
156 KB (159,744 bytes)

The file mcpreinstall.exe has been seen being distributed by the following URL.

http://download.mcafee.com/products/licensed/.../McPreInstall.exe

Scan mcpreinstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.