home

windows10upgrade9194.exe

Windows 10 Upgrade Assistant

Microsoft Corporation

This is a setup program which is used to install the application. This is installed with Windows 10 Upgrade Assistant. The file has been seen being downloaded from click.linksynergy.com and multiple other hosts.
Publisher:
Microsoft Corporation

Product:
Windows 10 Upgrade Assistant

Version:
1.4.9200.17332

MD5:
f931c043a48ff5f244548ce7f15677a1

SHA-1:
84c9638da97741332a0fac34c94f3d3c24119f37

SHA-256:
a635193e20a2e4fc986aefffc617824de8b68e0c747ae1f0c800badb2ca6316d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 3:38:14 AM UTC  (today)

File size:
5.5 MB (5,792,848 bytes)

Product version:
1.4.9200.17332

Copyright:
Copyright © Microsoft Corporation. All rights reserved.

Original file name:
Windows10Upgrader.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\programs\windows10upgrade9194.exe

File PE Metadata
Compilation timestamp:
6/24/2016 10:14:28 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.10

CTPH (ssdeep):
98304:/ts/rPJaG8JYSQG0ML8NtfnJW/LXJCKKZE5zTQ8vH3CfSyjORwuxqW:2DPJa2S0MLoBi7JC45Y8/ydjORwuB

Entry address:
0x93000

Entry point:
90, 90, 68, DB, 8B, 55, 00, 58, 90, BE, 1C, 30, 49, 00, 90, 68, 98, 05, 00, 00, 5A, 31, 04, 32, 83, EA, 02, 83, EA, 02, 75, F5, 33, F6, 54, 00, DB, 8B, 55, 00, DB, 8B, 15, 00, 6E, 4F, 51, 00, 8B, EF, 0D, 00, 0D, E0, 0D, 00, DB, 3B, 57, 00, D9, 8B, 55, 00, 03, 2F, 13, 00, 05, 3F, 13, 00, 2F, 3F, 13, 00, 83, F6, 53, 00, 07, 3F, 53, 00, 29, 3F, 53, 00, 03, 0B, 53, 00, 07, 3F, 53, 00, 29, 3F, 53, 00, DB, 8B, 55, 00, DB, 8B, 55, 00, DB, 8B, 55, 00, DB, 8B, 55, 00, AB, 2D, 13, 00, DB, 8B, 55, 00, DB, 8B, 55, 00...
 
[+]

Code size:
411.5 KB (421,376 bytes)

The file windows10upgrade9194.exe has been discovered within the following program.

Windows 10 Upgrade Assistant  by Microsoft Corporation
4% remove it
 
Powered by Should I Remove It?

The file windows10upgrade9194.exe has been seen being distributed by the following 50 URLs.

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ir2w2dpga300t5ok02e0q&murl=http://go.microsoft.com/.../?LinkID=799445

http://187.72.248.49/data/6b4930105a5014dd/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

http://103.225.0.2/data/6a5f602009ba88da/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

http://182.190.4.90/data/27bb30802004f7e9/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

http://182.190.3.114/data/3533a07008798046/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade20528.exe

C:\Users\Liberty\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\06M688HE\Windows10Upgrade9194.exe

http://68.106.66.1/data/dbe830a05e5d0445/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

C:\Users\JAIREMI\Downloads\Windows10Upgrade9252.exe

http://212.131.108.134/data/32e960104481d8ae/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade.exe

http://61.60.212.178/data/6c3bf0c0433035ad/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

http://download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade.exe

http://177.205.9.217/data/a1a3e0701681150d/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

http://177.205.9.209/data/dbd1604028a50706/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9252.exe

https://doc-0s-4c-docs.googleusercontent.com/docs/securesc/jt7d6lfgcgrkvcelbi61rk64jk482mgb/l9u86ju0vjouk4o89oneq96nm3s09j6c/1468389600000/.../03824140352668481496/0B-uUOr6O30zeTnI0ZkkyZHlkdm8?e=download

C:\Users\Administrator\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ITVRL380\Windows10Upgrade20517.exe

http://click.linksynergy.com/deeplink?id=XdSn0e3h3*k&mid=24542&u1=420237M1M160702104538MIR&murl=http://go.microsoft.com/.../?LinkID=799445

D:\2\Windows10Upgrade9194.exe

http://212.131.124.6/data/b7c770f0582a2439/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

http://download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade20649.exe

https://docs.google.com/uc?authuser=0&id=0B_9ILStNrWF5NEhGeEQwcnZUaGs&export=download

C:\Users\t01\Downloads\Windows10Upgrade9194.exe

http://122.2.223.11/data/dc83f0402422ac3e/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

http://177.205.9.209/data/714d60f05ccfe9f0/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade20664.exe

http://187.72.248.49/data/b85ed0100e47756b/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade20517.exe

http://62.8.79.14/data/2c7ca0c02c835c98/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade20528.exe

https://coolbar.pro/tracker/go-new?url=http://download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade20664.exe&cid=12

http://177.205.9.209/data/d490f0401a906c9d/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9194.exe

C:\Users\M6500\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BY7QAOD3\Windows10Upgrade20528.exe

http://80.17.2.222/data/2d483050320e93ca/download.microsoft.com/download/0/4/7/047889D0-578C-4A44-A38F-7F30A6CB3809/.../Windows10Upgrade9252.exe

C:\Users\Walaikorn\Downloads\Windows10Upgrade9194 (1).exe

Latest 30 of 128 download URLs

Scan windows10upgrade9194.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.