home

mediacreationtoolx64.exe

Sistema Operacional Microsoft Windows

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from dl-web.dropbox.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Sistema Operacional Microsoft® Windows®

Description:
Instalação do Windows 10

Version:
10.0.10240.16423 (th1_st1.150731-1741)

MD5:
61c130f9682548eabb4ef1aaa04b62f3

SHA-1:
e7c11c05ea151428644eef3cec28417b7dba384c

SHA-256:
e751405446fed5eab7769634cfa09e7a899fe8a9b3c087ff8b784a7c6c9aea46

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 8:58:31 PM UTC  (today)

File size:
18.7 MB (19,648,448 bytes)

Product version:
10.0.10240.16423

Copyright:
© Microsoft Corporation. Todos os direitos reservados.

Original file name:
SetupPrep.exe

File type:
Executable application (Win64 EXE)

Language:
Brazilian Portuguese

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
6/4/2015 1:42:45 PM

Valid to:
9/4/2016 1:42:45 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000010A2C79AED7797BA6AC00010000010A

File PE Metadata
Compilation timestamp:
7/31/2015 11:53:20 PM

OS version:
10.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
12.10

CTPH (ssdeep):
196608:zdlGT5SWqZh0vmZqz0C9LaIkBdGD1O9vQvJgUm2nQyR4EzpsxuCOlm:zKT54ZhqmQoCVaLB4I4mdCTzpsxuC7

Entry address:
0x272A0

Entry point:
48, 83, EC, 28, E8, 7B, 07, 00, 00, 48, 83, C4, 28, E9, 6E, FD, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 31, 9D, 01, 00, 75, 10, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 01, C3, 48, C1, C9, 10, E9, 62, 02, 00, 00, CC, CC, CC, CC, CC, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 20, 48, 8B, F9, 48, 8B, 05, 08, D0, 01, 00, 48, 89, 44, 24, 38, 48, 83, F8, FF, 75, 17, 48, 8B, 1D, 2E, 2A, 00, 00, 48, 8B, CB, FF, 15, CD...
 
[+]

Code size:
160 KB (163,840 bytes)

The file mediacreationtoolx64.exe has been seen being distributed by the following 50 URLs.

https://dl-web.dropbox.com/get/.../MediaCreationToolx64.exe

http://download1824.mediafire.com/l9jlhrcuia4g/.../MediaCreationToolx64.exe

http://download1824.mediafire.com/7k74505sewog/.../MediaCreationToolx64.exe

http://download1354.mediafire.com/l7huubjluilg/.../MediaCreationToolx64.exe

http://download1790.mediafire.com/4tqbv7d8p74g/.../MediaCreationToolx64.exe

https://docs.google.com/uc?authuser=0&id=0B1hPpa4R2wZMU05qbEdVRnJMUlk&export=download

http://www.tamindir.com/indir/MjAxNS0wOC0yMSAxNjoxMjozMQ==/windows-10/windows/.../64-bit

http://download804.mediafire.com/f0mril5fs0jg/.../MediaCreationToolx64.exe

q=http://go.microsoft.com/.../?LinkId=616936&redir_token=QgLODs3aeggSB50wOGX_PBw8X5B8MTQzODgyMDI2OUAxNDM4NzMzODY5

http://download964.mediafire.com/trz8pss1dxdg/.../MediaCreationToolx64.exe

http://download1354.mediafire.com/8g1ru5dcabvg/.../MediaCreationToolx64.exe

http://download1576.mediafire.com/6lhfpyx8pazg/.../MediaCreationToolx64.exe

https://mega.nz/temporary/.../VsERRTxY

http://download1824.mediafire.com/e1aeo26lqizg/.../MediaCreationToolx64.exe

https://docs.google.com/uc?export=download&confirm=CDT8&id=0B1hPpa4R2wZMU05qbEdVRnJMUlk

http://download916.mediafire.com/dzjlst2jjfig/.../MediaCreationToolx64.exe

http://download1576.mediafire.com/hb6dlzri37zg/.../MediaCreationToolx64.exe

http://download1712.mediafire.com/v9dbmv2a0hng/.../MediaCreationToolx64.exe

q=http://go.microsoft.com/.../?LinkId=616936&redir_token=gbJ7dl1SSnVEJkFqTEFcYov29S18MTQ0MDAyMzQ1N0AxNDM5OTM3MDU3

http://download1838.mediafire.com/gp7b268g404g/.../windows10downloader.exe

http://download2194.mediafire.com/f81i8bn551ag/.../MediaCreationToolx64.exe

http://download1824.mediafire.com/sa3843336qyg/.../MediaCreationToolx64.exe

http://download804.mediafire.com/ph9qvf8g5kyg/.../MediaCreationToolx64.exe

http://l.facebook.com/l.php?u=http://go.microsoft.com/.../?LinkId=616936&h=oAQH_4v7X&s=1

http://download2194.mediafire.com/fvpt15xp75dg/.../MediaCreationToolx64.exe

http://www.dicasparacomputador.com/.../MediaCreationToolx64.exe

http://download2194.mediafire.com/9byp9bdu1zyg/.../MediaCreationToolx64.exe

http://www.windows8facile.fr/download/windows-10-media-creation-tool-x64/?wpdmdl=8427" > <div class="media"> <div class="pull-left"><img class="wpdm_icon" src="http://www.windows8facile.fr/wp-content/uploads/2016/07/icon-dl.png" /></div> <div class="media-body"><strong class="ptitle">Windows 10 Media Creation Tool (64bits) <span class="label label-default" style="font-weight: 400;">18.74 MB</span></strong> <div><strong><a class='wpdm-download-link wpdm-download-locked [btnclass]' rel='nofollow' href='#' onclick="location.href='http://www.windows8facile.fr/download/windows-10-media-creation-tool-x64/?wpdmdl=8427';return false;">Télécharger</a></strong></div> </div> </.../div><div style="clear: both"></.../div>

http://download999.mediafire.com/dillfkb8t3ig/.../MediaCreationToolx64.exe

http://download935.mediafire.com/cihx8ew58ipg/.../MediaCreationToolx64.exe

Latest 30 of 65 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.