home

wlsetup-web.exe

Windows Essentials

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Essentials

Description:
Programme d’installation de Windows Essentials

Version:
16.4.3528.0331

MD5:
75d564d5787b55eade82e56cf46a9aaf

SHA-1:
74b1029d9176c56e49693f875642e57d154914f4

SHA-256:
ea6e317bc6c309e09c22badc6208acd205d3d3f458a5030ddc29b5c19177d37a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 8:26:15 AM UTC  (today)

File size:
1.2 MB (1,244,360 bytes)

Product version:
16.4.3528.0331

Copyright:
© Microsoft Corporation. Tous droits réservés.

Original file name:
wlsres.dll.mui

File type:
Executable application (Win32 EXE)

Language:
French

Common path:
C:\users\{user}\downloads\wlsetup-web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 11:33:39 PM

Valid to:
4/25/2014 12:33:39 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
4/1/2014 6:27:13 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:Nnz7O4ILdA9KHjStCd8Xxpqo01fgBOV2oOb5/rt:1fIIKCBBpN0eO2oO

Entry address:
0x36596

Entry point:
E8, D8, 43, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 6A, 0C, 68, 18, C4, 4D, 00, E8, 1F, 46, 00, 00, 83, 65, E4, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 4F, 89, 7D, 10, 78, 0C, 2B, F3, 89, 75, 08, 8B, CE, FF, 55, 14, EB, EE, 33, C0, 40, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, 20, 46, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, 45, E4, 85, C0, 75, 0B, FF, 75, 14, 57, 53, 56, E8, 06, 00, 00, 00, C3, CC, CC...
 
[+]

Code size:
925 KB (947,200 bytes)

The file wlsetup-web.exe has been seen being distributed by the following 50 URLs.

http://lb.cdn.m6web.fr/d/c/a/5b3be99eb09bda645467d7611e59e798/587e3d38/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/f6aa6161eb9178ce67d466262d66c29b/589c8919/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/425ec822d568e6e021c861e63c6c2137/584ed0a7/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/78093bd1c4fde3c347bf28a604780e54/585c32d4/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/5debfbe6c0e6a96bd79a8477ee0c9c5c/586ce4df/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/2754b573cd03f7f9b087fe9752709a22/587fc469/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/30abfc421195f2760eb8b1769898a4e2/587e94cd/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/4e6210b5fec409d8771a9911a72a19c6/58964f70/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/901a82cd5997d18f52f0a1f59047786a/5859b1e2/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/f0451096b74d1934d7d63494ebd235a8/58a9671c/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/382c72140f304e04c019ba95517e319f/5717be5b/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/bd53c35f10abd5c7f32dd70b9336bd1a/5852ec9e/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/ad285ad2b7a63b2251439c354e270d38/58793e74/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/a34c92cdd93e0c0c7427ae4d7e4bb0f1/586aae9a/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/7d33b6cc4497d9a5b748ad3c6d60a041/586cafb9/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/db32643ccb3612e55026cd2c565766d5/56a263df/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/6631a12ab6ff6e46c0073d4faa50b6fd/58812467/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/ecd26a4db776bb230bcb8d9438ceec62/58acbff8/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/5dffdbf30a46ec2eac0bc065650ce118/5878acb2/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/ef10d063e3094c1dbf96251a2876be95/5839b77d/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/56e2c58bb86eaa4bc5e599bf53fb2324/58013987/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/40ec681ed8d765b3e26b31b9f0f47856/588b71d6/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/2bcb9abc5abecaa1e6b8b1e4c9585c3f/5877ff8a/soft/.../movie-maker_12_fr_10967.exe

http://d.telechargerhosting.com/?data= 6Oez0WA3y3X8Wpx9sX AU3KNtd04iSHqsGU9E4LFPWfD09Uk2YGApXcfz/ejWFDCmHPMwVFWxhf58y6dTxjtAePj14EYcwpoZCQMqZ5ZeRFJzfndihoPIE3qHIPRyGkxr6fK7E9kMbox4METcIFhzlt3XrRZEynbWm9HGEyjCM WkbQDsVXTSsKUU/wabJSATWyR/ekQVLrJqsukHKUy1EU7awWFJ FUSpeeJeZImUAbZE5QWaC3glSvr1D615bMRAo5jaAhFErTTW/djdimQ5lYWsA3HalaOqwW9Ajgyp/WTrq83CT6HgyOt3zsDNnZ8AwZXqw KYdSo8XXlkSzDupdE2w8sJiysIZaf1aPT2WPV99O6CebRDYiAWSQ7xLoFa4eMNJe/nAal7hs8exAbckybRRhnjA RORM2IghbCCH uJCR/z7WkRF Kcf/qJt zbyWmvl4sk1OCu7trf5eve/Rmd8gkoDK wUSWg9AWxweOCCNu5gwU5IEPcIWblJ0VPilCsclQ2p8XYr4h9Bu9vNQWczRiocIWdsQzAs0bk4zM/jaHnFnszXv/QIZn09AfaHQas9w==&key=X81JrBrbSQWiGDwL mfMlUEk6ObgwiFsggPDq2X9DDKdIkVMMYPSgBxbBq RK3nI5x98jhJLI8cw2Wk4VzWZ1T kQQ2LEuTf1nHD5j oAT DRvvKO9GP1lbUghtDQHelP4YalW3ljnT9nLQTik6UzeP2PzD2CdEsxPI6ybgZRHYzf/LQ/eZWKTTzHqodulBNwptK1y9lZJMML1g9VRYER1BX CO6ITAtMm12Yi9bV8B/7BTDwtNPMMtd9LVZqdx/xuHjyqKOwSvbsk7ldYZP9o5fEq7Rm0A/.../ORA==&ic_user_id=9257&fallback

http://lb.cdn.m6web.fr/d/c/a/71c77a04faee42ce13344e101236088f/5890be29/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/716057d8485d711cd9dad0674fdf9e0c/58472f84/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/5150cee6d63dbeb9f1fb40927106eb32/58644ed5/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/6fde76aafa97aa59f9bbda709aa64880/587d2ee3/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/82cea7dd34602699496209db3558274f/58288f08/soft/.../movie-maker_12_fr_10967.exe

http://lb.cdn.m6web.fr/d/c/a/dda1c908dda7c120c8d902a894d3ae4c/586a78a1/soft/.../movie-maker_12_fr_10967.exe

Latest 30 of 1,629 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.