home

wlsetup-web.exe

Windows Essentials

Microsoft Corporation

This is a setup and installation application. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Essentials

Description:
Windows Essentials Installer

Version:
16.4.3528.0331

MD5:
9c093bb71c7d0dd492389149e5c4dac2

SHA-1:
c732b1d173db961390e35608a117616f33a24e4e

SHA-256:
6be0d55dec644f4447f2959f539cbae5c582b96bb6d0a4bf24534a32faa82c3b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/24/2024 3:37:30 PM UTC  (today)

File size:
1.2 MB (1,243,848 bytes)

Product version:
16.4.3528.0331

Copyright:
© Microsoft Corporation. Tutti i diritti riservati.

Original file name:
wlsres.dll.mui

File type:
Executable application (Win32 EXE)

Language:
Italiano

Common path:
C:\users\{user}\downloads\wlsetup-web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 11:33:39 PM

Valid to:
4/25/2014 12:33:39 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
4/1/2014 6:27:13 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:Dnz7O4ILdA9KHjStCd8Xxpqo01fgBOV2ohb5Dot:PfIIKCBBpN0eO2oh

Entry address:
0x36596

Entry point:
E8, D8, 43, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 6A, 0C, 68, 18, C4, 4D, 00, E8, 1F, 46, 00, 00, 83, 65, E4, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 4F, 89, 7D, 10, 78, 0C, 2B, F3, 89, 75, 08, 8B, CE, FF, 55, 14, EB, EE, 33, C0, 40, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, 20, 46, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, 45, E4, 85, C0, 75, 0B, FF, 75, 14, 57, 53, 56, E8, 06, 00, 00, 00, C3, CC, CC...
 
[+]

Code size:
925 KB (947,200 bytes)

The file wlsetup-web.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1441085908&Signature=eJL~lG84MIZZFy~rPJTXHgHgj2cepKdjC9hCDEwYxDlPn66WGUMg572~2ygDPvH~VsWXqteId~p6kNH9mXXT7skF~LIEG14JGGR3mAihmDJ~9x--EHvUfJd-O6wGVFtzxfF2A8OV-YXgLTZhNWF2GhmK-s78vnHEjlq4PwCUiZI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1441934835&Signature=I9QkNQWKwP4MmeUvymFJPmKNcvBIIFv8Hcrx3~fWx0WoL--tHF17F9OlxeyWtPRwYlaQ24gkCjXMFjvnsFSQ56gnr5GLuT6~AcrpmLaeweArySVDt9QPNKI-TOC7x7Y4rOZLjxN2uYEMVA2XQi~FoLcG57dnE68CyPhXaHixfmo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1424310384&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OomzvVmjC5zAO58QOjmtCPzH9qV5~O5yHFuUG3369rT9nl05St2A4PPvbgUa~iWPndrj2hafqN~pirQ1d~0IOHcHur9zjxPfKoTLo7z9dVlOePqT6HPFUzdcscSsJH30vHFzMAEp3wJRYGtVBeqn2Z0aKaoqJ4kn5MJku8OwnL4_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1423094813&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=I-uZBaNR8eej6bfm0wcCz6ilxLLADhhW32npQ52oDsxtigWpwyTI2N5YRfYwI~OyJgKOlBixj2HKU3-H2FzBgp71K3xHbmXwl8nGzcycJiFhutYc42gHk0o08fCGI65aD2tUHYC5NlWi9StRy6ApIQ2pXFci6eZ9hhTlQCBC-Dw_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1432180206&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Fvb8OeFR0ezC0hyOwz~Y~0XIcOMLsBqQbBNK8MjCYQUGNnRRR6qE0uv44fU7W2ySFy6PumuEb9C~FCXuqdEchKy3-5FPe2phzxGfvnZQ6oRbm~nr0zs180t3M2zVkOkBLsKsja9NKTX3kNqQnQNFw5BmipEUT5YEmrxjJsyGWbk_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1443330803&Signature=DJpbpiBWuAE7MDqLs-JEoc3DRpYcgC-C-bmMaHph8ejGx6ofwuNei-Vpzr5CgFdx7Pp9BDWy8RC~mUkfoy71XUnk-X8M7lV0A~-HZSXU1pwkZFS3W49TOXoJKzOBsCV6GK0Fx~hzjBG0V2Hgm4GcH2qsgWc2FLOkeW7fsUYbFx8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://www.bestcontentbundle.com/_2APr_soxFji4_uxFglwu7SEbj06shlbbY4jOYL4aQC0PQnNwR0DzhmCeVT5GYbt1vRb 9J2wGmm _W4LFvabUPrZ5an_UcOxz3CVQTqDPbIHcxZQB799524vpob4RgnnRVUbt49EFxWt4RdRqHA0ex7EHhJ_QIPzzzvy4Du5l45giOPOPTUi7qm8Xv1W029uOwkchS xY0XzsCW_L3BjgS8ROWY2w==-G2AAAGRgnq2tSQiFPGEDDlzSAZd5G9CGjbGzxSHNMjzPkQT4hcZt25vFyG4Bvwn0BpfxPXcCdZ5Q 23l xFpIzj2unsj_7eBU8m9vlXH_QCtiBI0SZEsQbI=

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1440563884&Signature=ggvoYWO4UZLWQD-X-RleMx7Z8qd7Ldkczq1yY1d0JaoyJ-igcqjZXYj7y0bBVOlrOwpdPb-JNOR5-ugQCROg0svX0HaJ6Bo1uO33BVRmfpryl4ePzrAoIz6EUJXviKxzL6qtwjvD6015-8mOFwp5Y~~oTa8Ps0i9rO8b4swsp4c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1438151835&Signature=Ys9zidAQb0GEMYs1JQEqOy0DvYxKErECjG-HKwlxpLM3SAXkU4TWLV5PzAKF4l6ec9jEXnGi8RZrPN9RRALXC5rz9-789JO2H7j2IWar34ju9d0-WReCFzNa428MfDuT~uK9nK29rDhGOjPWUKJhgLTv00G543Qo49-rPKK5Jtg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1442182623&Signature=ND~xP~hKpes~~XrYtmXlWGTiQLQVOnDiDcJo-HAd0h1zT-iuNWxjwPnyd~E8pi6TT-PH7jySReYrTVojiF9YRjuYbo5o5-KUTbpLwQu50B806QJ7QUaysac7btQWJuacoT148tgYsRjVq3aiD7V23wnxpos4sZ3Nn4cvCXrkhOM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1440193565&Signature=ZUd5-iXNlGNUcaHiXIRjzU4Qt1uUmsDsdcuMddMDpsyCTps2Uzv1aKzccGKhzVj03QW99zagEFD2ZCN6STsdk6QdfAZPjKoGDKbWKuQGOrvsUbCVmoUbKhf20NcM0lok4ooQJiBPZWozJdCRCya41ktsK23LOlBXqCUkRg9UL~Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1439143225&Signature=TyuNikonQpEF3BIxfpvhKbQrAsdbAPY5I6uzkUx7fLY~zHX7eIflWqw2NEezH0ZYDEhxcLU3SsPj2Glhb62lnCeIMSpttOUKI88CtfDjOvl5Xq81X2CdDkG8IYhubflMhhBypYErwd-RppozetO1dj0mHMXVAliUNKo6qfnHtck_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1429380180&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=dLODHu3IPKFFk8WkVWEH4JAul~FrmbRf7tVMJCpxhZSsN7i8fN~1Vgr1GsjSYPgZ6ifR7Xjh9-boEyDQo5CoW5ZOXH-DaF1bgMomAtLWVGyZD3C0pcXoVFd04Dcll~TnSE5YmBl-JDq6UcgRYXBcAE6SYIwWqbktggaQgQmRvUQ_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1433780752&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Yy~kvxHj4OSVSztSfYBTSU10WoufOeEVo3hzg1g4MyiOjDfNKyUauQJ6S3nE9JlOYrA3iJNwr0ye5cIZkeEL43tLZqDbCxndo~3ScRyxuDxrVn~jZ8EaN1zRgqpu6bl4~IoXVsZ1-lZjNphZnPZdkecPXnDNZgfJWzL8eEWWgYg_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1430606166&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=BfcJI-Z-1GaG7G0T7yA9kjxtOUYcmV~olWys5bNslegc0kLOnY0i-u6jJjuQftasT0BoWbZNu47djdKWxEaJwUPwSxbufIUfKet9REgPvYbYE-p7mbCEQqA7VsSwotstiFbL1XqIEdYSiRw-EbD6AHrVyhOblIZGIQRAXTPT52s_&filename=wlsetup-web_it.exe

http://www.centersharenew.com/LQIhVpwiLN7EM77I0fDI_Q zSyIJSN1vtXn7UbAWr52XxeR0EEdsspnNgbGhHYi N2gkYBIf0BNxWD82wt7GfmHCMwsLp4N8iCKFCInUAz6D2alcVxaq XTpM4 WaEkpKKPDedyTN5Sy964m3NV11bnyKx1Y4cIn51WxzLZU2QzlXVwSxDCKehuNgTMUGTFKezqTGUfqlxbWvoKZbNUTGzZBTAcjcw==-G2AAAGRgnq2tCQrFPGADDlzSAZd5G9CGjbGzxSHNMjzPkQT4hcZt25vFyG4Bvwn0BpfxM3cCdZ5Q 2vl xFLKj2rlkgSW2dbFz_ oVqHX6AVUYLGKIJlMRo=

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1428991491&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Z~jF6EtiEY9-op0eUqqo2WHr~CSRai5ZmfdZ9q7XSn6QBzL2tF-ka7wMv3Ex23dlIeowQEXXshPDCI66AilhHsf5S3nfnd7gLSoSAVM2AIRblf4QcCSDD0dqD~3myWDMC2SCJ5uQl2u9N5TUk0xvTZFqZVq1rwSlvERwiyvtL3c_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1423701107&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=TPmqFuoZOdYdZeBFMxLq~rIEb1PTWQirXSONbpqQk8odebScY2rcOPB4ed4TSOXU5KoPNmm3K2DkwZI8cKCRBUAYFwDhcWZuKc441PLZoRWZ~srCpanBhWcMz9UxIviI5OOjT~lemxuRhXO-jL5PrrwrgkM1P6e2LkapLkP5H6g_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1423072161&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=NV9tUOgGTxhhalAQPPyZG3nzBHHsqbMCX8eLxlisYfswND-cF7tpnNZZYT~TNsGsbYYSxKP9KM4Ef6rQEaSRCJ8ztWYND-W36ErFvJsAznZ7g6FLj~R75iTWzDSxmLfXzYYm2NHUyHo-BXIg1dQeJR1IRPa-qQDGR2bN2FHHP7k_&filename=wlsetup-web_it.exe

http://server3.xnavigation.net/dl/88bmG/303/14439/defa/.../windows-movie-maker

https://secure.innodl.com/.../windows-live-mail-desktop.exe

https://windows-movie-maker.en.softonic.com/download-tracker?th=1/.../Sm GK2tvkuj2NRBh8vkb4ckaE3T58kcMj8AdkTUYbyXj1W4kgA7nJMSZXtqSQQIEp65bsEVpuzXepSBSBLVwL2j0MVO1ELfxn8Fnu5t9s=

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1444975561&Signature=HOxI7y0mqQb4mp7R1KdBFgpXeLhZWwV7fL4o1rbxrRVrTs9zdMowGfdY6O6hzZ1rS6CGgAVCU-rrpzMkPqdaE8QRWpl8fq7i5dS9jqzDaAOOf99UIu0H8BE41Ohm8aS51SGEorvMD-C~pqgDsvWBrDdpdqUgP0rfqf9QVn~h2GU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1440814092&Signature=SarWYwOLwwmyXzaQcgZ6LDhlawJ1ahYXEr7bD3Qzs209-rGLzuUDD6wwqr~mxjP70zsFb~F5~3B7924tctIjQ-IzcPqSwrz58BRcgJ5lHnAKna-Pv~bEnCNaw~OSSfeg7R1mX2ipDbVRijCplUqY4rAjyD~UauudX38e61FIToE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1435008012&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YSxjZnTBxA-yhaoBXQP0mrHFHohzeqe49LM22XUO-4~onz8oIek4ZsAEefUcKpdKACeyjnwzbSqv2DtY-zIZMf4mutL7Xh7qyY1fIw~zDz1go5dTbWohqLVDsXfVbn3sYHnYMzGsEtJ7hAmswkxrzSifdYylKA1kqzsicW5bYMw_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1444609306&Signature=G-73QjiqDy2jj6mYxpNv2Z1dprr0GYC1ZTN48YhVXAVgzrpmfmL-Re44WnvqEuV8TuBNO8hiyZcRhpoxAFuNUskyJ8X3u2EKxQCWXFk9bAXMKhWq5j8rivygOl-~qGfSWQcM-13XEWFSA1RaEKC2CxH1TfKq02ruZJeJz7covP4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1435347973&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=h9JcPofkGPFPkivIZVbOIdbe6w9fIOre-rxIZEiieplLvvpwDuXj3ksB-urwNCfgj38cKBPJ7o3oBkQ7oyDFd36KyhZpvkIBxi2~fVJg4l493txUTemU-eAsavj~LNXfUoxRTkaMYSdbgSAARmmwjrjnGlUspsu7ZEzdg2Sn-vk_&filename=wlsetup-web_it.exe

http://l.facebook.com/l.php?u=http://go.microsoft.com/fwlink/.../?LinkID=255475&h=MAQFmYngs

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1434952346&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Z4ZZnR02mJvAchw~9PLKzLWO-n-IO9OIV3dyR7cuUB2Yv3LiW6Rpxgu9q2fOH5s3DaFcmNGJV1XvgIoKB6I0v6z5hmvXRZS9TZ2UjLhvWhktceHi0HWzlkMcxnjdXbC1La6NQ7oOh7f~pgRpJad7u~hceSQO-jkOHaEE-kjFNu0_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/c73/2b1/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3350289&instance=softonic_it&type=PROGRAM&Expires=1438321083&Signature=BuMc0NgEZDfWsTn8HcVzB78gT9y1hk71omuTq4XWngDUSFf8tTmlR4bfkjFtgNJvFvUnSNzoKAf96Q7t4d9J-pf0f-cupmzXWC6g64nC6bS62kaVw~DZquuElE2f7mHCjcFKSNE-QK5yxN-scuDthL7Hpk4wV4o9FxyyTAdRI4Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

Latest 30 of 136 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.