home

mediacreationtool.exe

Windows 10 Setup

Microsoft Corporation

Publisher:
Microsoft Corporation  (signed and verified)

Product:
Microsoft® Windows® Operating System

Description:
Windows 10 Setup

Version:
10.0.10586.117 (th2_release.160212-2359)

MD5:
be915becab4c49e3f079f73b83d59996

SHA-1:
7ac943a757db26c9ad91ac1b067685911eac06e9

SHA-256:
2895e346eaf9681cae16b95f7116dec40c27033722d6508cf255903c9202c069

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/26/2024 6:44:35 AM UTC  (today)

File size:
17.6 MB (18,447,464 bytes)

Product version:
10.0.10586.117

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SetupPrep.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\mediacreationtool.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 10:42:45 AM

Valid to:
9/4/2016 10:42:45 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
2/13/2016 2:38:56 AM

OS version:
10.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.10

CTPH (ssdeep):
196608:nH5akWdjER6gbdKTQuNm5PtHblp6RymS+ZaBAOvWvzf:nH5akWubPHRp6RddnOevz

Entry address:
0x2C790

Entry point:
E8, F3, 07, 00, 00, E9, AE, FD, FF, FF, CC, CC, CC, CC, CC, CC, 3B, 0D, 04, 20, 43, 00, 75, 03, C2, 00, 00, E9, 62, 02, 00, 00, CC, CC, CC, CC, CC, 6A, 18, 68, 78, 13, 43, 00, E8, 93, 08, 00, 00, 83, 65, D8, 00, A1, 68, 4D, 43, 00, 89, 45, E0, 83, F8, FF, 75, 16, FF, 75, 08, 8B, 35, B0, 56, 43, 00, 8B, CE, FF, 15, F8, 56, 43, 00, FF, D6, 59, EB, 54, 6A, 08, E8, EB, 08, 00, 00, 59, 83, 65, FC, 00, A1, 68, 4D, 43, 00, 89, 45, E0, A1, 64, 4D, 43, 00, 89, 45, DC, 8D, 45, DC, 50, 8D, 45, E0, 50, FF, 75, 08, E8...
 
[+]

Entropy:
5.4226

Code size:
193.5 KB (198,144 bytes)

The file mediacreationtool.exe has been seen being distributed by the following 50 URLs.

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=imo594ldjc011m4q02e0q&murl=http://go.microsoft.com/.../?LinkId=691209

http://go.redirectingat.com/?id=68756X1529949&site=about.com/espanol&xs=1&isjs=1&url=http://go.microsoft.com/fwlink/?LinkId=691209&xguid=8a0ef4db8dbeb9914a7fed109346b484&xuuid=02b7d48a4ebcdb3afcc8b23c1caf897b&xsessid=680ca88510a33f267a3acfd273d02254&xcreo=0&xed=0&sref=http://windowsespanol.about.com/od/ConoceEInstalaWindows/ss/Descargar-Gratis-Windows10-final.htm&pref=http://windowsespanol.about.com/od/AccesoriosYProgramas/.../Programas-Para-Windows.htm&xtz=-120

http://external.comss.ru/url.php?url=http://download.microsoft.com/download/1/C/4/.../MediaCreationTool.exe

http://180.149.99.6/data/8f68508047266175/download.microsoft.com/download/1/C/4/.../MediaCreationTool.exe

http://ftp-stahuj.centrum.cz/dl/87f4f44bb3c7e9dd27106dcedc80b133/57f794d5/stahuj/download/software/secured/w/windows-10-media-creation-tool/.../MediaCreationTool.exe

https://www.google.com/url?hl=nl&q=http://download.microsoft.com/download/1/C/4/.../MediaCreationTool.exe&source=gmail&ust=1484408704852000&usg=AFQjCNH5SFh4mvcbu8PFJ3EcoqIUN2nCNQ

http://static.com-magazin.de/dl/5/4/4/4/3/.../MediaCreationTool.exe

http://www.facebook.com/l.php?u=http://go.microsoft.com/.../?LinkId=691209&h=QAQG5LNfE

http://go.redirectingat.com/?id=68756X1529949&site=about.com/espanol&xs=1&isjs=1&url=http://go.microsoft.com/fwlink/?LinkId=691209&xguid=3ba894bfababfc52814f6a512f97d909&xuuid=0dad9804fd0c7afac0a4dc015ec94437&xsessid=a9db4b8fab13350b58420c2cd7ebbc91&xcreo=0&xed=0&sref=http://windowsespanol.about.com/od/ConoceEInstalaWindows/ss/Descargar-Gratis-Windows10-final.htm&pref=https://.../&xtz=180

http://89.239.241.110:8080/cgi-bin/filemanager/.../MediaCreationTool.exe

http://go.redirectingat.com/?id=68756X1529949&site=about.com/espanol&xs=1&isjs=1&url=http://go.microsoft.com/fwlink/?LinkId=691209&xguid=4a9f415922b63bc67aaad93e11337524&xuuid=cff739219b71af8f2bbba519f7d38d11&xsessid=e886a25ef1540c1aa162884d21908553&xcreo=0&xed=0&sref=http://windowsespanol.about.com/od/ConoceEInstalaWindows/ss/Descargar-Gratis-Windows10-final.htm&pref=https://.../&xtz=300

blob:EEF8BA39-817C-432E-88EB-FD0E22D56ED1

http://dlgbit.winfuture.de/4230755176df49d23d902e0e0567b811/5794040e/software/Win10MediaCreationTool/.../MediaCreationTool.exe

http://dla.uloz.to/Ps;Hs;fid=116384398;cid=263453204;rid=292727343;up=0;uip=85.132.136.208;tm=1481465008;ut=f;aff=ulozto.cz;did=ulozto-cz;He;ch=c8f39ad17f3ba63a075ffe5ba8d99e09;Pe/.../mediacreationtool-exe?bD&c=263453204&De

http://click.linksynergy.com/deeplink?id=XdSn0e3h3*k&mid=24542&u1=420237M1M160620121655LMY&murl=http://go.microsoft.com/.../?LinkId=691209

https://mega.nz/persistent/.../l95iEBQb

http://click.linksynergy.com/deeplink?id=XdSn0e3h3*k&mid=24542&u1=412831M1M160301113353ELB&murl=http://go.microsoft.com/.../?LinkId=691209

http://ftp-stahuj.centrum.cz/dl/0a9a0d852f480854204ae30a9009e19f/57e9692f/stahuj/download/software/secured/w/windows-10-media-creation-tool/.../MediaCreationTool.exe

https://www.google.com/url?q=http://download.microsoft.com/download/1/C/4/.../MediaCreationTool.exe&source=gmail&ust=1475530376411000&usg=AFQjCNGC2CeUHtPq6h_VX-KWOasE4se4pg

http://click.linksynergy.com/deeplink?id=XdSn0e3h3*k&mid=24542&u1=420237M1M160703070647MDG&murl=http://go.microsoft.com/.../?LinkId=691209

http://l.facebook.com/l.php?u=http://.../?id=68756X1529949&site=about.com/espanol&xs=1&isjs=1&url=http://go.microsoft.com/fwlink/?LinkId=691209&xguid=2330d1abe8cf0b0da666651f89d762fe&xuuid=fe8851bdd6d4700d0290e264ecf8f236&xsessid=8b69423b683daba0954b6692158569a7&xcreo=0&xed=0&sref=http://windowsespanol.about.com/od/ConoceEInstalaWindows/ss/Descargar-Gratis-Windows10-final.htm&pref=https://www.google.com.ec/&xtz=300&h=QAQHpvnpW

http://80.17.2.222/data/d2ada0202790aa0e/download.microsoft.com/download/1/C/4/.../MediaCreationTool.exe

http://googleweblight.com/?lite_url=http://go.microsoft.com/.../?LinkId=691209&lite_escape=&id=CkqKV87ZMMPhjwTi86yIBA&f=1

http://gsf-cf.softonic.com/7ac/943/.../MediaCreationTool.exe

http://x.chip.de/intern/dl/?url=http://www.chip.de/.../?lastchange=070320160841&pid=chipderedesign&cid=81516301&euid=4f60ade1dfe27b141411be85&source=BLUB2&browser=chrome&ref=&tid=38989&tname=Windows-Tools&v=oct2015&pageLayout=withinstaller|e51

http://151.99.86.70/data/310c70202982cd0a/download.microsoft.com/download/1/C/4/.../MediaCreationTool.exe

http://go.redirectingat.com/?id=68756X1529949&site=about.com/espanol&xs=1&isjs=1&url=http://go.microsoft.com/fwlink/?LinkId=691209&xguid=b0838f0dc5468fe8ea38ea03587ff427&xuuid=d8459434390aaca89be6044f9ed5dc55&xsessid=e307ace3617ee48bcbeadea3c69398dd&xcreo=0&xed=0&sref=http://windowsespanol.about.com/od/ConoceEInstalaWindows/ss/Descargar-Gratis-Windows10-final.htm&pref=http://windowsespanol.about.com/od/ConoceEInstalaWindows/.../Windows-10-USB.htm&xtz=360

http://151.99.86.70/data/ab5590f0323de50d/download.microsoft.com/download/1/C/4/.../MediaCreationTool.exe

http://prosperent.com/click/api/linkaffiliator/userId/417234/apikey/8ef3729e11bffc23bdd3637c6257f2f7/sid/f_62_49544x894x/location/http://lnkr.us/lWFn2eW5g/url/http://go.microsoft.com/.../?LinkId=691209

http://go.redirectingat.com/?id=68756X1529949&site=about.com/espanol&xs=1&isjs=1&url=http://go.microsoft.com/fwlink/?LinkId=691209&xguid=6236aa9e3cbe94a20b94884fc5d523e4&xuuid=1f0d906eba22a83843b055f9ba185fe4&xsessid=15093a4e63c1fc324e29fc39016b37b9&xcreo=0&xed=0&sref=http://windowsespanol.about.com/od/ConoceEInstalaWindows/ss/Descargar-Gratis-Windows10-final.htm&pref=https://.../&xtz=300

Latest 30 of 97 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.