home

6061155_stp.exe

Windows Essentials

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from soft.archive1.clubic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Essentials

Description:
Programme d’installation de Windows Essentials

Version:
16.4.3508.0205

MD5:
6d9160939f2fa5172bd45b27d2f68ad0

SHA-1:
905ce43dbc07a63cdd00e8e539b0a2826c57ea22

SHA-256:
b8c6c0b844baa073ae02231b62ec7286177f1dae44ac703a7b234033ca668797

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/2/2024 11:18:08 AM UTC  (today)

File size:
1.2 MB (1,244,144 bytes)

Product version:
16.4.3508.0205

Copyright:
© Microsoft Corporation. Tous droits réservés.

Original file name:
wlsres.dll.mui

File type:
Executable application (Win32 EXE)

Language:
French

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\6061155_stp.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
9/4/2012 11:42:09 PM

Valid to:
3/4/2013 10:42:09 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000009D1E8D27AEB8F3D83800010000009D

File PE Metadata
Compilation timestamp:
2/6/2013 7:38:56 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:Pbz7O4ILdA9KHjStCd8Xxpqo01fgBOV2oOb5k3tp:3fIIKCBBpN0eO2oOm

Entry address:
0x36596

Entry point:
E8, D8, 43, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 6A, 0C, 68, 18, C4, 4D, 00, E8, 1F, 46, 00, 00, 83, 65, E4, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 4F, 89, 7D, 10, 78, 0C, 2B, F3, 89, 75, 08, 8B, CE, FF, 55, 14, EB, EE, 33, C0, 40, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, 20, 46, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, 45, E4, 85, C0, 75, 0B, FF, 75, 14, 57, 53, 56, E8, 06, 00, 00, 00, C3, CC, CC...
 
[+]

Code size:
925 KB (947,200 bytes)

The file 6061155_stp.exe has been seen being distributed by the following 50 URLs.

http://soft.archive1.clubic.com/files/6b5aaa73eb164cc83f93725ac126b3f8/52d92a2a/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/120d50409cf13f1a9641e5a9696cbfae/537489db/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/65358f2fd5bd9f2d94e44d9ebb658a84/539081d6/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/32363f7877ee4e7158562a31f5873cfc/537c7f46/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/43d9ee8db5324afc4d3a23678a8edeb6/53df6d72/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://www.informatique-astuces.com/wp-content/.../wlsetup-web.exe

http://lb.cdn.m6web.fr/d/c/a/eb1f7819c2b1cff1482861f1624b839b/53ce2632/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://www.logitheque.com/.../789ee425.dl

http://lb.cdn.m6web.fr/d/c/a/11561b15b00a55edf7893aa2e0093f60/538ccc2f/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/183029e38ffc1d4ca7ed4e7bb8c8eaa4/531c9bfc/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://soft.archive2.clubic.com/files/215a4b7b04ce147a0ce6576615a1476b/5294c2db/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

https://taalimma-my.sharepoint.com/personal/abdennasser_kharij_taalim_ma/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://soft.archive1.clubic.com/files/dc5cff0f55ba130236aca70a5474022d/52a257ca/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/62ef80ac43302bc96d4fc5a8ef10dda9/53e8ce4f/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/e0d6d9c5895cb3e743ce43fcc7746bf7/53e10fef/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/ebf27adbc48b9ef37eadbaf880e98db6/539de366/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/07cb7ba0481333c55dd524b0e2abc1b0/53bec8d3/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://soft.archive2.clubic.com/files/b86a6378ee82b732e979f2d9dd204709/52791f3a/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/327bf356faeaa1a09bc69ae687c9dbe6/53a20d66/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

https://www.getsw.me/.../windowslivemessenger.exe

https://www.getsw.me/.../windowsmoviemaker.exe

http://lb.cdn.m6web.fr/d/c/a/48883d6ba8193f5bb9c33b3a0894301c/53c1745f/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/fa249d42d01460e45b02e75032218952/5347fee0/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/fe7aafe42ba34724b5497e0eef6b6269/53d2b4c5/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/8adbb30f96daf7619440d30f669115a5/532ef48c/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/d7579ee89d8097944df993cdfbd2d6bf/53f5e86d/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://soft.archive2.clubic.com/files/e009476fcdb54fd91f23e9a31aa4aad1/52990624/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://d210.cdn.m6web.fr/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/66980e8acd27249f4bed0f296b4593b9/53c3f4d6/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

http://d110.cdn.m6web.fr/soft/.../windows-movie-maker-windows-live-installer_2012_fr_10967.exe

Latest 30 of 52 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.