» wlinstaller.exe
Overview
Analysis
File Details
Programs (1)
Downloads (10)

wlinstaller.exe

Windows Live installer

Microsoft Corporation

This is a setup and installation application. This is installed with Windows Live Essentials. The file has been seen being downloaded from en.kioskea.net and multiple other hosts.

File name:

wlinstaller.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Windows Live installer

Description:

Windows Live installer client executable

Version:

12.0.1471.1025

MD5:

7facf0ca85e2bd1f7e717b58c1e94610

SHA-1:

ed07da6f71f71f1ffb4945a200fcbeffa4eb24a1

SHA-256:

9325552a72289290df1359cb8ffcc5cb8fb9ee6e2c59c6d3bd2316f7b58bf3d8

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

11/5/2024 2:20:53 PM UTC (today)

File size:

2.3 MB (2,400,784 bytes)

Product version:

12.0.1471.1025

Original file name:

WLSuite.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

8/22/2007 8:23:13 PM

Valid to:

2/22/2009 7:33:13 PM

Subject:

CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

610F784D000000000003

File PE Metadata

Compilation timestamp:

10/25/2007 6:28:08 PM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

49152:o3lvdIh5NrB7f1QQqEfcf5FFnVtmhamUC42BlhwKGefzPJBYsE0Mk3ZPJBYsE0Mi:o3lvdIh5jTLqEkf5TVtmmReGe7PJBYsT

Entry address:

0x2F358

Entry point:

E8, B7, 47, 00, 00, E9, 12, FE, FF, FF, CC, CC, CC, CC, CC, E9, CE, 06, 00, 00, CC, CC, CC, CC, CC, E9, F1, FF, FF, FF, CC, CC, CC, CC, CC, 6A, 14, 68, C0, 38, 04, 01, E8, E5, 01, 00, 00, 83, 65, FC, 00, FF, 4D, 10, 78, 3A, 8B, 4D, 08, 2B, 4D, 0C, 89, 4D, 08, FF, 55, 14, EB, ED, 8B, 45, EC, 89, 45, E4, 8B, 45, E4, 8B, 00, 89, 45, E0, 8B, 45, E0, 81, 38, 63, 73, 6D, E0, 74, 0B, C7, 45, DC, 00, 00, 00, 00, 8B, 45, DC, C3, E8, E6, 47, 00, 00, 8B, 65, E8, C7, 45, FC, FE, FF, FF, FF, E8, DB, 01, 00, 00, C2, 10... 
[+]

Entropy:

7.6336

Code size:

275.5 KB (282,112 bytes)

The file wlinstaller.exe has been discovered within the following program.

Windows Live Essentials by Microsoft Corporation

Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services.

explore.live.com/windows-live-essentials

10% remove it

The file wlinstaller.exe has been seen being distributed by the following 10 URLs.

http://en.kioskea.net/download/.../download-1972-windows-live-photo-gallery

http://filehippo.com/download/file/.../

http://fs33.filehippo.com/8965/.../WLinstaller.exe

http://download1569.mediafire.com/pxy4678m2osg/.../WLinstaller8.5.exe

http://files.downloadnow.com/s/software/57/51/.../WLInstaller.exe

http://files.downloadnow-5.com/s/software/57/51/.../WLInstaller.exe

http://f.ccm2.net/www.commentcamarche.net/download/.../Live_Photo_Gallery-1.0.exe

http://e.ccm2.net/en.kioskea.net/download/.../Live_Photo_Gallery.exe

http://ec.ccm2.net/ccm.net/download/.../Live_Photo_Gallery.exe

http://ec.ccm2.net/en.kioskea.net/download/.../Live_Photo_Gallery.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.