home

windows_live_mail.exe

Instalator Windows Live

Microsoft Corporation

This is a setup program which is used to install the application. The file has been seen being downloaded from download.nf.pl.
Publisher:
Microsoft Corporation

Product:
Instalator Windows Live

Description:
Wykonywalny instalator Windows Live na kliencie

Version:
12.0.2000.1009

MD5:
7f42814387197e34896be9d035b9ebd8

SHA-1:
eba8264d9e966987c26a836fcce93af07e294647

SHA-256:
b45c919971665b1db1ec18a4cd8aea430a174a03e75958be2d4fd938c185de8e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 4:16:51 PM UTC  (today)

File size:
2.4 MB (2,489,804 bytes)

Product version:
12.0.2000.1009

Copyright:
© Microsoft Corporation. Wszelkie prawa zastrzeżone.

Original file name:
WLSuite.exe

File type:
Executable application (Win32 EXE)

Language:
Polish

Common path:
C:\users\{user}\downloads\windows_live_mail.exe

File PE Metadata
Compilation timestamp:
10/26/2007 12:28:08 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:h3lvdIh5Nr2z7b1I8fEcpS8hAGeUDlwY25UN5tI98SdCPJBYsE0MhmZPJBYsE0MQ:h3lvdIh5kz/zMcpFhAGjDlh25G7c8JPr

Entry address:
0x2F358

Entry point:
E8, B7, 47, 00, 00, E9, 12, FE, FF, FF, CC, CC, CC, CC, CC, E9, CE, 06, 00, 00, CC, CC, CC, CC, CC, E9, F1, FF, FF, FF, CC, CC, CC, CC, CC, 6A, 14, 68, C0, 38, 04, 01, E8, E5, 01, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, E6, 47, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, DB, 01, 00, 00, C2, 10...
 
[+]

Code size:
275.5 KB (282,112 bytes)

The file windows_live_mail.exe has been seen being distributed by the following URL.

http://download.nf.pl/Download/2181/Windows-Live-Mail/Microsoft-poczta-RSS/Pobierz/.../

Scan windows_live_mail.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.