home

wlsetup-custom.exe

Windows Live

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Live

Description:
Windows Live Installer

Version:
14.0.8117.0416

MD5:
d0cc1b699e914dc4e0d5f36218c66082

SHA-1:
a5eabf8076d2411269c3c55b2e30477542dfbdb0

SHA-256:
091b3bd3b6f0a0b7d90e04a18fcf4e8589d26c367add6bf2f60ad18b7a4a22f1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/27/2024 1:09:07 AM UTC  (today)

File size:
1.2 MB (1,266,512 bytes)

Product version:
14.0.8117.0416

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
wlsetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\windows\syswow64\wlsetup-custom.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
12/7/2009 7:40:29 PM

Valid to:
3/7/2011 7:40:29 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6101CF3E00000000000F

File PE Metadata
Compilation timestamp:
4/16/2010 11:18:14 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:nwYSp5zfu05h8EOTNhz8uig/oRILJmZnsYwsEbT1tifY:nxSTXho/Au1oUJmCRbF

Entry address:
0x2C47A

Entry point:
E8, 98, 3B, 00, 00, E9, 12, FE, FF, FF, CC, CC, CC, CC, CC, E9, 1D, 09, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 60, D0, 4B, 00, 00, 0F, 84, D1, 3E, 00, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 0F, 85, A0, 3E, 00, 00, EB, 00, F3, 0F, 7E, 44, 24, 04, 66, 0F, 28, 15, F0, 45, 40, 00, 66, 0F, 28, C8, 66, 0F, 28, F8, 66, 0F, 73, D0...
 
[+]

Code size:
721.5 KB (738,816 bytes)

The file wlsetup-custom.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/efb0d383f26dd067f3ebeeddacf7153a/588fd9a8/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/6f02d92ca3482b103fb98aa04f8e298b/57f1a7c5/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/538d60709cfe9a3ea6927b9ec4de0981/58755d87/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://ftpclubicb9a.clubic.com/files/b779824f95575cc84ee8d84b6b0d6c85/5177b744/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/e71659193830f585bbf69687c9ff39e5/5664b2a4/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/08957fc8399c11c25efc1778ce84fe30/541b17c1/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/29577aeda4dba4f80eee4c1cd481af28/56c75384/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/d74b61b796ed7879a44cde990c6c2e33/56c8bc40/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/f7fdb07a8449ad21f91e467f1e71552c/5835563d/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/e7b52c9b6aa177cef26eccf28048d3a0/57b2b6dd/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/ea5bd0d7e5318f1d8d4202883f81a582/57f46e7b/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/abdec58c2b9ec30e39941059489ebdb9/562b8e3e/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/d97b593f3fc1488fd4481c436024b0ad/56fda539/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/97809083353c2ca0e9ff41043e97cbc8/55dda986/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/7fb722c4b1511c0cb385d791075f3081/581b5969/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/171c44bee95b721eb6beeff8864bb0cb/583f21ee/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/c4f6e50843baa51ac741cc0256a5d049/58163123/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/f0efbd2d89e04b53bc165a7b686391d2/585870b8/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/3ddf31182e18c3543c3884ce84687db9/57e610b0/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/ef61a4bf2d9d9801bc152035e755bb41/581b2d80/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://ftpclubicb9a.clubic.com/files/8e3607f7ebe6f72f8b321ee103349bc2/51faa2fc/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/5276f671e39207b20914b459de6719b2/54a58305/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/7c19fb48f2019ce74f26d763befbb3a6/572a4dc5/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/ccad60f8c48b8372e90359b9e15acbc3/585c6238/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/33959b4565769614b9a071fe51128d7d/58276879/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://net.geo.opera.com/opera/.../windows?http_referrer=missing_via_opera_com&utm_source=(direct)_via_opera_com&utm_medium=doc&utm_campaign=(direct)_via_opera_com

http://lb.cdn.m6web.fr/d/c/a/eea720afa48c377c13bbdc253c42a54b/5788dbd9/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/b8bf123514b6b446886a7fddc50623fb/578dea94/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/47af0ad841442e1d629a392d6d930531/5848985b/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

http://lb.cdn.m6web.fr/d/c/a/b139d30ca3cc2e618169a6b1ea1e3655/57fca8d5/soft/.../windows-live-messenger_wl_messenger_2009_14.0.8117.416_francais_19367.exe

Latest 30 of 145 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.