Gridinsoft Logo
File Icon

A Análise do Arquivo mediacreationtool.exe (Windows 11 Setup)

Atualizado 1 month ago
Verificado por Malaware Check
mediacreationtool.exe

Análise Técnica

Nome do Arquivo mediacreationtool.exe
Tipo de Arquivo
PE32 executable (GUI) Intel 80386, for MS Windows
Versão do Scanner 1.0.216.174
Versão do Banco de Dados 2025-05-06 09:00:22 UTC
✓

Arquivo Limpo

Nenhuma ameaça detectada pelo nosso scanner

0%
Taxa de Detecção
11,046,032
Tamanho do Arquivo (bytes)
2025-05-06
Data de Análise

Verificar Outro Arquivo

Identificação do Arquivo

Tipo de Hash Valor Ação
MD5
b2ef653a8575cebf20a4aabe17b70b6b
SHA1
a686304500e45ebf945c85b9de9085e6b58604c0
SHA256
ab9967c2cd345ffdbf3c4283d95bb23c77a82a2782f381634f5dfa48f2b75071
SHA512
dd293115d1f1b4474f5cdb03884529ea9e887f2420df8b4b050cb6f0e458cf8515c6dd33b977c20c680c088d6b4728f922df74f0f2475b2762f4f4377971f21b
ImpHash
1b19ed7c91261aa15eed975fd67f9d0d

Análise PE

Informações Básicas

▼
Ícone
Hash: 60608a07d112ace9d7a180ee9deaa3d4
Fuzzy: bc85df9c7cdf2d8ba0f53a0f681e6f31
dHash: 6060f0d8ecfc4000
Base da Imagem 0x00400000
Ponto de Entrada 0x0047b150
Tempo de Compilação 2090-07-21 07:23:50
Soma de Verificação 0x00a8c570 (Real: 0x00a8c570)
Versão do SO 10.0
Assinaturas PEiD PE32 executable (GUI) Intel 80386, for MS Windows
Caminho PDB SetupPrep.pdb
Assinatura Digital OK
Importações 21 bibliotecas
Exportações 0 funções
Recursos 564 Recursos
Seções 7 Seções

Informações de Versão

▼
CompanyName Microsoft Corporation
FileDescription إعداد Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.1
Translation 0x0401 0x04b0
CompanyName Microsoft Corporation
FileDescription Инсталираща програма на Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Всички права запазени.
OriginalFilename SetupPrep.exe
ProductName Операционна система Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0402 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 安裝程式
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.1
Translation 0x0404 0x04b0
CompanyName Microsoft Corporation
FileDescription Instalace Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Všechna práva vyhrazena.
OriginalFilename SetupPrep.exe
ProductName Operační systém Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0405 0x04b0
CompanyName Microsoft Corporation
FileDescription Konfiguration af Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Alle rettigheder forbeholdes.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operativsystem
ProductVersion 10.0.26100.1
Translation 0x0406 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 Setup
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Alle Rechte vorbehalten.
OriginalFilename SetupPrep.exe
ProductName Betriebssystem Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0407 0x04b0
CompanyName Microsoft Corporation
FileDescription Εγκατάσταση των Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Με επιφύλαξη κάθε νόμιμου δικαιώματος.
OriginalFilename SetupPrep.exe
ProductName Λειτουργικό σύστημα Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0408 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 Setup
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.1
Translation 0x0409 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11:n asennus
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Kaikki oikeudet pidätetään.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® -käyttöjärjestelmä
ProductVersion 10.0.26100.1
Translation 0x040b 0x04b0
CompanyName Microsoft Corporation
FileDescription Configuration de Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Tous droits réservés.
OriginalFilename SetupPrep.exe
ProductName Système d’exploitation Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x040c 0x04b0
CompanyName Microsoft Corporation
FileDescription ההתקנה של Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.1
Translation 0x040d 0x04b0
CompanyName Microsoft Corporation
FileDescription A Windows 11 telepítője
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Minden jog fenntartva.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® operációs rendszer
ProductVersion 10.0.26100.1
Translation 0x040e 0x04b0
CompanyName Microsoft Corporation
FileDescription Installazione di Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Tutti i diritti riservati.
OriginalFilename SetupPrep.exe
ProductName Sistema operativo Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0410 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 セットアップ
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.1
Translation 0x0411 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 설치 프로그램
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.1
Translation 0x0412 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 Setup
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Alle rechten voorbehouden.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows®-besturingssysteem
ProductVersion 10.0.26100.1
Translation 0x0413 0x04b0
CompanyName Microsoft Corporation
FileDescription Installasjonsprogram for Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Med enerett.
OriginalFilename SetupPrep.exe
ProductName Operativsystemet Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0414 0x04b0
CompanyName Microsoft Corporation
FileDescription Instalator systemu Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Wszelkie prawa zastrzeżone.
OriginalFilename SetupPrep.exe
ProductName System operacyjny Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0415 0x04b0
CompanyName Microsoft Corporation
FileDescription Instalação do Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Todos os direitos reservados.
OriginalFilename SetupPrep.exe
ProductName Sistema Operacional Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0416 0x04b0
CompanyName Microsoft Corporation
FileDescription Configurare Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Toate drepturile rezervate.
OriginalFilename SetupPrep.exe
ProductName Sistem de operare Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0418 0x04b0
CompanyName Microsoft Corporation
FileDescription Программа установки Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Корпорация Майкрософт. Все права защищены.
OriginalFilename SetupPrep.exe
ProductName Операционная система Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0419 0x04b0
CompanyName Microsoft Corporation
FileDescription Program za instalaciju sustava Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Sva prava pridržana.
OriginalFilename SetupPrep.exe
ProductName Operacijski sustav Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x041a 0x04b0
CompanyName Microsoft Corporation
FileDescription Inštalátor systému Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Všetky práva vyhradené.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.1
Translation 0x041b 0x04b0
CompanyName Microsoft Corporation
FileDescription Installationsprogram för Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Med ensamrätt.
OriginalFilename SetupPrep.exe
ProductName Operativsystemet Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x041d 0x04b0
CompanyName Microsoft Corporation
FileDescription โปรแกรมติดตั้ง Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation สงวนลิขสิทธิ์
OriginalFilename SetupPrep.exe
ProductName ระบบปฏิบัติการ Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x041e 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 Kurulumu
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Tüm hakları saklıdır.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® İşletim Sistemi
ProductVersion 10.0.26100.1
Translation 0x041f 0x04b0
CompanyName Microsoft Corporation
FileDescription Програма інсталяції Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Корпорація Майкрософт. Усі права захищені.
OriginalFilename SetupPrep.exe
ProductName Операційна система Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0422 0x04b0
CompanyName Microsoft Corporation
FileDescription Namestitveni program za Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Vse pravice pridržane.
OriginalFilename SetupPrep.exe
ProductName Operacijski sistem Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0424 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 installiprogramm
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Kõik õigused kaitstud.
OriginalFilename SetupPrep.exe
ProductName Operatsioonisüsteem Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0425 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 uzstādīšana
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Visas tiesības paturētas.
OriginalFilename SetupPrep.exe
ProductName Operētājsistēma Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0426 0x04b0
CompanyName Microsoft Corporation
FileDescription „Windows 11“ sąranka
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © „Microsoft Corporation“. Visos teisės ginamos.
OriginalFilename SetupPrep.exe
ProductName Operacinė sistema „Microsoft® Windows®“
ProductVersion 10.0.26100.1
Translation 0x0427 0x04b0
CompanyName Microsoft Corporation
FileDescription Windows 11 安装程序
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename SetupPrep.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.26100.1
Translation 0x0804 0x04b0
CompanyName Microsoft Corporation
FileDescription Programa de instalación de Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Todos los derechos reservados.
OriginalFilename SetupPrep.exe
ProductName Sistema operativo Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x080a 0x04b0
CompanyName Microsoft Corporation
FileDescription Configuração do Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Todos os direitos reservados.
OriginalFilename SetupPrep.exe
ProductName Sistema Operativo Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0816 0x04b0
CompanyName Microsoft Corporation
FileDescription Configuración de Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Todos los derechos reservados.
OriginalFilename SetupPrep.exe
ProductName Sistema operativo Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0c0a 0x04b0
CompanyName Microsoft Corporation
FileDescription Configuration de Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Tous droits réservés.
OriginalFilename SetupPrep.exe
ProductName Système d’exploitation Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x0c0c 0x04b0
CompanyName Microsoft Corporation
FileDescription Instalacija operativnog sistema Windows 11
FileVersion 10.0.26100.1 (ge_release.240331-1435)
InternalName SetupPrep.exe
LegalCopyright © Microsoft Corporation. Sva prava zadržana.
OriginalFilename SetupPrep.exe
ProductName Operativni sistem Microsoft® Windows®
ProductVersion 10.0.26100.1
Translation 0x241a 0x04b0

Seções PE

▼
Nome Endereço Virtual Tamanho Virtual Tamanho Bruto Entropia Características MD5
.text 0x00001000 566,964 bytes 567,296 bytes 6.39 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ DD3FE11C015BC20B25BF6554771007DF
.data 0x0008c000 13,504 bytes 3,584 bytes 4.52 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 179FED910E0DAD369E4DA474F06C1F4C
.idata 0x00090000 12,352 bytes 12,800 bytes 5.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7FA7A8F9D25D6EDE8A63E83699DE035B
.didat 0x00094000 8 bytes 512 bytes 0.06 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A1315F9590BDD41092EE51A47E8D81CD
.boxload 0x00095000 64 bytes 512 bytes 0.73 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 16176A1907E2B624F0316E3C1C6EE71B
.rsrc 0x00096000 1,420,404 bytes 1,420,800 bytes 5.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8C16C6808C4266349EA24997E635E676
.reloc 0x001f1000 28,072 bytes 28,160 bytes 6.77 (Comprimido) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E7547F02BA605EA63C968CC0BE7BA567
Alerta de Análise de Entropia

1 seção(ões) com entropia elevada (≥6.5) - possível compressão

Análise de Recursos

▼
Total de Recursos: 564 (1,404,191 bytes)
Tipo de Recurso Quantidade Tamanho Total Porcentagem
IMAGE 39 258,367 bytes
18.4%
RT_ICON 26 93,598 bytes
6.7%
RT_DIALOG 184 40,538 bytes
2.9%
RT_STRING 274 880,898 bytes
62.7%
RT_RCDATA 1 89,344 bytes
6.4%
RT_GROUP_ICON 2 376 bytes
0%
RT_VERSION 37 34,528 bytes
2.5%
RT_MANIFEST 1 6,542 bytes
0.5%

Análise da Cadeia de Certificados

▼
Certificado Information
Produto Microsoft® Windows® Operating System
Descrição Windows 11 Setup
Versão do Arquivo 10.0.26100.1 (ge_release.240331-1435)
Nome Original SetupPrep.exe
Data de Assinatura 05:48 AM 04/01/2024 (432 dias atrás)
Status de Verificação Signed
Assinantes Microsoft Corporation; Microsoft Code Signing PCA 2010; Microsoft Root Certificate Authority 2010
Contra-assinantes Microsoft Time-Stamp Service; Microsoft Time-Stamp PCA 2010; Microsoft Root Certificate Authority 2010
Nome Interno SetupPrep.exe
Copyright © Microsoft Corporation. All rights reserved.
Resumo da Cadeia de Certificados
Microsoft Corporation #1 Principal
Período de Validade: 2023-10-19 19:50:57 → 2024-10-16 19:50:57
Algoritmo de Assinatura: sha256RSA
Número de Série: 33 00 00 05 4F 13 66 3C 8B D6 7C DF D5 00 00 00 00 05 4F
Microsoft Code Signing PCA 2010 #2 Cadeia
Período de Validade: 2010-07-06 20:40:17 → 2025-07-06 20:50:17
Algoritmo de Assinatura: sha256RSA
Número de Série: 61 0C 52 4C 00 00 00 00 00 03
Microsoft Time-Stamp Service #3 Cadeia
Período de Validade: 2023-12-06 18:45:51 → 2025-03-05 18:45:51
Algoritmo de Assinatura: sha256RSA
Número de Série: 33 00 00 01 F0 2A 7C 1D 59 3B E6 1F AD 00 01 00 00 01 F0
Microsoft Time-Stamp PCA 2010 #4 Cadeia
Período de Validade: 2021-09-30 18:22:25 → 2030-09-30 18:32:25
Algoritmo de Assinatura: sha256RSA
Número de Série: 33 00 00 00 15 C5 E7 6B 9E 02 9B 49 99 00 00 00 00 00 15

✓ Este arquivo foi assinado digitalmente e a cadeia de certificados foi verificada.

  • A assinatura garante a integridade do arquivo e a autenticidade do editor.
  • O carimbo de tempo prova quando a assinatura foi aplicada.
Status de Verificação do Certificado

OK

Lembre-se: Este é o Resultado do Scanner de Vírus Online

O Gridinsoft Anti-Malware possui um mecanismo de verificação de vírus muito mais poderoso. Recomendamos usá-lo para um diagnóstico mais preciso de sistemas infectados. Este breve guia ajudará você a instalar nosso produto principal para diagnósticos mais precisos:

Baixar Anti-Malware

Mantenha Seu Sistema Protegido

Este arquivo parece limpo, mas a manutenção regular de segurança é importante

  1. Verificações Regulares: Execute verificações semanais do sistema para detectar novas ameaças antes que possam causar danos.
  2. Mantenha o Software Atualizado: Certifique-se de que seu sistema operacional e todos os aplicativos tenham os patches de segurança mais recentes.
  3. Navegação Segura: Evite sites suspeitos e nunca baixe software de fontes não confiáveis.
  4. Segurança de E-mail: Seja cauteloso com anexos e links de e-mail, mesmo de contatos conhecidos.
Proteção Proativa
Este arquivo passou em todas as verificações de segurança, mas permaneça vigilante. Novas variantes de malware aparecem diariamente e podem escapar da detecção. Sempre verifique se os arquivos vêm de fontes oficiais e verifique as assinaturas digitais quando disponíveis.

Deixar um Comentário

Compartilhe seus pensamentos ou insights sobre este arquivo. Você concorda com nossa conclusão?

* Seu feedback pode influenciar nossa classificação, e tenha certeza de que seu e-mail permanecerá confidencial e será usado apenas para entrar em contato com você, se necessário.
Sua Pontuação para

Gridinsoft Anti-Malware

Cure seu PC de qualquer tipo de malware

GridinSoft Anti-Malware irá ajudá-lo a proteger seu computador contra spyware, trojans, backdoors, rootkits. Ele limpa seu sistema de módulos de propaganda irritantes e outras coisas maliciosas desenvolvidas por hackers.

Anti-Malware Baixar agora
Gridinsoft Anti-Malware