home

wlsetup-web.exe

Windows Essentials

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from click.linksynergy.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Essentials

Description:
Windows Essentials Installer

Version:
16.4.3528.0331

MD5:
8423b539d6dcecf2d710c210f01d6c6a

SHA-1:
24bcef46ea3ed47158c72a753f6b1b6005468879

SHA-256:
7d9c68b11e45a763facc7577a51c8c00b7fb654b9ba044deb223e7140a2efe50

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/25/2024 1:40:26 PM UTC  (today)

File size:
1.2 MB (1,242,312 bytes)

Product version:
16.4.3528.0331

Copyright:
© Microsoft Corporation. Reservados todos los derechos.

Original file name:
wlsres.dll.mui

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\users\{user}\downloads\wlsetup-web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 10:33:39 PM

Valid to:
4/24/2014 11:33:39 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
4/1/2014 5:27:13 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:nnz7O4ILdA9KHjStCd8Xxpqo01fgBOV2o+b5r7t:zfIIKCBBpN0eO2o+

Entry address:
0x36596

Entry point:
E8, D8, 43, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 6A, 0C, 68, 18, C4, 4D, 00, E8, 1F, 46, 00, 00, 83, 65, E4, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 4F, 89, 7D, 10, 78, 0C, 2B, F3, 89, 75, 08, 8B, CE, FF, 55, 14, EB, EE, 33, C0, 40, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, 20, 46, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, 45, E4, 85, C0, 75, 0B, FF, 75, 14, 57, 53, 56, E8, 06, 00, 00, 00, C3, CC, CC...
 
[+]

Code size:
925 KB (947,200 bytes)

The file wlsetup-web.exe has been seen being distributed by the following 50 URLs.

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=it354n9kjj012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iwezjt05ku012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iyr3esj8rl012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ippxorj050012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ivrilgp1jr012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ivikwveshh012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iphuqm8tx9012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://secure.downloadfp.com/.../windows-movie-maker.exe

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ixl2twv9ev012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iy61icrgo2012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

https://onedrive.live.com/download.aspx?cid=CFCBF0123BC06675&authKey=!AGwBXo9J-NYS8GQ&resid=CFCBF0123BC06675!1539&ithint=.exe

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iyozy4zp5o012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iu98wrtale012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iq70sf3k85012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iwgk4vir4b012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://www.bundlerepositorycontent.com/nYSwIiHTyq6Qq1x4SMijPlONToq mFv0XiTMuhhLEA_vmSpOlj_f77Jgha ld4jgK9uF6yn7hwURpaKsGyhtYsrFXNAsyf8QQNEQ3qpry1mzvH_G2sviB9LJK3tcqQyFxeVNEZbESH7P0t_ZAfFVAEYB0EA04htXNI83E wig3GRy7A0ar7G45vFjy7CTbhqCmevPFbyLAnUuNM5GOkJCnrpNxXLIA==-Ow==

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iu8t2odolu012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://cursosvoca.sems.udg.mx/mod/.../view.php?id=68064

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iuckysjlnk012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://i_eazel-com_windows-movie-maker-2015-16-4-3522-110.faurtdrtrei.com/crawled_soft/2/3/.../230115-678212-windows-movie-maker-2015.exe

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ipxaf82xp4012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iprltf8v7m012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ivcv5840yi012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=inpi6zynm5012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iypsb1ukau012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iwydnx4zif012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ii0i3wahao012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iwwkj1uz3l012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=ixtu6s4xu5012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

http://click.linksynergy.com/deeplink?id=je6NUbpObpQ&mid=24542&u1=iumlufjiyl012cq702e0q&murl=http://go.microsoft.com/fwlink/.../?LinkID=255475

Latest 30 of 758 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.