home

wlsetup-web.exe

Windows Essentials

Microsoft Corporation

This is installed with Windows Live Essentials. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Essentials

Description:
Windows Essentials Installer

Version:
16.4.3505.0912

MD5:
02e392ff9e7c53535d14f7fbc6eb31e2

SHA-1:
ce709db10b9bf848c9f3e333f323dfef899f605e

SHA-256:
8f93ab1c2e374d8cc9451b6bb9666830a82ec94f794d1ad4e4a6c53053bda405

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
11/23/2024 1:43:35 AM UTC  (today)

File size:
1.2 MB (1,239,552 bytes)

Product version:
16.4.3505.0912

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
wlsetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\wlsetup-web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/26/2012 4:50:41 PM

Valid to:
10/26/2013 4:50:41 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000088590E3C511FE26A67000100000088

File PE Metadata
Compilation timestamp:
9/12/2012 6:40:55 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:+1z7O4ILdA9KHjStCd8Xxpqo01fgBOV2oEb5+iat/p:mfIIKCBBpN0eO2oE4t

Entry address:
0x36596

Entry point:
E8, D8, 43, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 6A, 0C, 68, 18, C4, 4D, 00, E8, 1F, 46, 00, 00, 83, 65, E4, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 4F, 89, 7D, 10, 78, 0C, 2B, F3, 89, 75, 08, 8B, CE, FF, 55, 14, EB, EE, 33, C0, 40, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, 20, 46, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, 45, E4, 85, C0, 75, 0B, FF, 75, 14, 57, 53, 56, E8, 06, 00, 00, 00, C3, CC, CC...
 
[+]

Entropy:
6.5623

Code size:
925 KB (947,200 bytes)

The file wlsetup-web.exe has been discovered within the following program.

Windows Live Essentials  by Microsoft Corporation
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services.
explore.live.com/windows-live-essentials
10% remove it
 
Powered by Should I Remove It?

The file wlsetup-web.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1440400420&Signature=CJi4Re99QfOvwZinm9TrX-5JuSvN5u4nFa67jUHKVeoiPXN4n91NZE5KIL~MJF~sWdJToxrni88QQExYIBPJ67TjK7c0ujWF6ek3QluFlwKJjnpVR1bEkE1MZvH6UxAT~nkHOzt53xvromZIsHwk41B3qPDhXxJ6zzM3sAgIaVY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://www.tamindir.com/indir/MjAxNS0wOS0wMiAyMjo0MzoyMw==/msn-indir/windows/.../

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1435593518&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YIwy5-kKGmaE-X8gHpchzO6A6~P9avahVcsraEh33p2vEMy~~gtoGMpWf5Wfsm4d2jLu714aRzqb33UMnkUfAKQfYHq0lx~W5JAzlVlZ3pRqAyhx2143uEJk4nWQuOGsQ7sKQFBq75QHzC3pLvsXM6bacyfLTGMtw--akRrjFnM_&filename=wlsetup-web.exe

http://www.bundletagchuckle.com/m1qxY3r1NWWoiZ0amD5P4p4goVnAjXDYf9GeD2WiHaHAyduFHw6bzXKLEBVMa8waXWcww4nlxM5LNFjTtEWOOzN_vPj8VMeP7VGgRV8SUrm86qNQlaWdrklGFkYFN6amXyqYvxWPfCD_CWvbD6HvMhp5sjwmt5ixkALLahXkTGRCj6lgA YRHx65ZwzjF6cP9iZ7SrZRPH08HaMt47KMcabXEqx9E9WWLt45EKUuLRNnOD1d o6LnLvZXhRIjI8OQPu6UgcWBvpbXBdiIOV_tP7Mjyj_nmwP9_OfikkAirvH9w3fNNFoXKvzbu uZZggXE6nkVbSC86zMckfaXdOdtNFwqxR_kHA99m8dgCOyBOPwBw1skRdACkFlzINjYQIEtwcKJZhWc3Q35cTdhuyBsN3GLG9OC4QLjDLPSYWqxaBnThKBL7g fSEkadXGGR_1SOGVm_QiYcCwtKrA23Sb01T aLxaQ9Unzy1Fo09ZafPzTowOVnVyVpPpqttEMjOOd8RSdtLq6H6RDBGOypb1oGpilrJUQ==-G18AAGRwXmtrvhSKWAHBBhy4RIMvgwZowwaccAXz6 97nwR4o2Fdt3ouahLhNwFfcB7eBuoFcq8nav7Gum7D7v5ka5MiFfIuGNdM4beGfaAxKC_JnEQYkQE=-e

http://www.applicationsdeliveryupdate.com/vXxi55un0zshu7gk8WZd1x 4Cu81cPWBG9ErKVof ytI4ICxFQNn4Sp8f9XnysiwWJVTz6tW5Fhs8wgjavTn8ceHoNtWBDKx7K5BqCxdij1yZoNxGvdR06OUI A8gytPnmjJt3a2bZGl5giPYaACzpzy z3xv5MP2dUvnbljf4c_7cS9Hro5rr6i7S0IvUlBsMhSkKozFyN0t8FyBQuJwLPVqpANYg==-G2MAAMTCbTH9_eZQ6QsZEXeDA_YwCNKiwQeQAQeP4fORaKa7ru0SPTU2S_6eheD3_IMlpJBPtllKVjHjdlNYn76mkI_1kUpelNz9VJF0MNBWWNRfDQ==

http://www.applicationsdeliveryupdate.com/7lhu7Dz2dqmHufl2j2ppTsYf4_lkIpOYgXQr8bYe4HOpApOZNISpfMMJoPHcm6fs5Bjp owHxIQd4xZNF1zdWgtLbJDQBMeVU4Xm13jA7mAk42LqIo AjrB1HL5qcYuyFbcaCVCLPoM2eLa7oWCmvqQ2wxDz6NhfGNYeWJkx3UJbBePkzV9szpD_rfwEfH8UuXyXzFXxx2WGsE1FdXoyiHGM94o7uXdW6oCBWq1PWcHnLupwcx0RYWt0X31 rsKwhZrLrqVquj3t1WshL19JrnAAEfdF7V1hGtrkGzIK60M8hb4VpeJdhJkvMSIQC20mfQ80vE6cluygmQVo4Mu86KiLJCTDosKtkVLKrdOjhDASNJ1ZYx9fVZxKR1N2QQZ41CjBfN5 P54lGZ7J17RSH5Gg4iQ05UHXeyU2G7bcnmXo1ZByNiIbV7Dkch6TSrI0gWQOFsJZdjiuDaQMI8tg27Z 8EdvCA2Ke53t49gKiGuqodQE14l_lb3LH86HWh5N3DSD3MlJrV8zA_X2MhZHJ53gYHnHEiZ7PlUifD8xR4ZvGafkiMkv0W23fpaltGq TdR1yiQmFBZ6Izme51iqAjcmxMAko 0rXnnnp7QO4W07pGNgHfeMO0PCaAlCXeK3xVQi7ayh-G2MAAMTCbTH9_eZQ6QsZEXeDA_YwCNKiwQeQAQeP4fORaKa7ru0SPTU2S_6eheD3_IMlpJBPtllKVjHjdlNYn76mkI_1kUpelNz9VJF0MNBWWNRfDQ==

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1436850469&Signature=NIPdKWpcFOdE3V2YOk5u1WLdad38FkFfxcMmSzc~aqvLPjApgkwcFyxrl0NRSOuLsouQwRyNjouGk-G5vZxByv8FY9P1JcBrIjzxd5mTIhGd75YAEQeeQwZZLhxPEe7FyDKofEQ7oHPhnmNUx~owD1lE9VNfRYkJrqTGjXCNnas_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_fr&type=PROGRAM&Expires=1444887272&Signature=efVxbULP9Ay12RkHbwaYzF85rwALxf7uHHIkazTenJMHtSiQDyuZ8CASkfhPdXiFKcuNDGEROesxKyaNSztF272p~zgyydqF~d2xIhSfi34YJZijjKKwInNljyVx1TIdbOhh-tLvkZ1NZ6ZnJHpIjvmbL-THjOh0FLluapsIueg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1440210217&Signature=NcmOf~cHfpn8U33pP1p7hSyKMqVTd49tUHxI6x6iDegKPw3zt3rWMTth3bxbVFHi6vdtgoj6E5wFbGV60YiJqjX84lE9HLFjNzgahTWHewy1oYcEFspkfKaahfpm6jtRDmAlT5ejML7c34N3Yp10ubwyTnAsCChsfYM2333kDLI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1444658884&Signature=QuEPfYtFEMyZd0ywL-1SRn5656OjpqbgNviEhxEyOkGBTRYfxT-eeDMZpmV4WdFSCnVWzgBXbcUYSj1u598sn1-l5z5ycwKrMPAZ-FtgBYcNP4UV74zQIRovBwkat49Z0ZynvJFymwyrJuoj~7S6LJK055DoL2VB1g8urD-tJKU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://www.giftchuckleflash.com/A5Dl6U1Yiv2mMeEL0UwJBqZkQQ0pnbyEhaccSDGr8gZbBKDsdXxfzfCh3DLF3ajsi 9mkH09mzu323auPEceUlWFXETxAxnUPKB2f8HRC4VrrLSu2tLnEKQ dj387eNqY6wEtfND7AD6lTZSAlLC_vbE2pkAjCWcBB8 s0OESjizRmNEkif9ohuowYUmv7ocbW3BXS298CyiQIxsVINpM98 IuLsgA==-G18AAGRgnq2tgUxu9gEbcOASDb4MGqANG3DCFcxvfN9zEuANTft tGtRkwh E_ADrtO3A_UCcq831P07 XnF8Lv Yy22P5_ hxW559 4fQ1AJ6IExdIMQ1Ak

http://windows-live-movie-maker.th.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKCIp52kkpg=

http://www.downloaddluniverse.com/nyZd0f6WWIcqeFOAhkm8KcIV6f11CWq 4PEDwyNZTi2RmSit1PSsnqqeu79nbWwBIsagniXch2JbytVl8HzD1zPH5sZN7BdA3w323lJduCJuD hBWRVbJg7 EsYrlP16KQNk2zuNUVfehb5ldzDc bXcN4z3k3k4kq9h23ctUNeh0WVanw5YzCGsrRJWEo9uCerw52_B6muK04gFsyIx_ALysLlysG2Bf5cQkAk540yuZjfMsq51j_QDFZeM5SCrQ2zPSde9ca9lyb5adYC 5x7RTN8fEGXcKECmw0MWn4KiEPhA7sCZFBT6 bjjnu9IWXmKIQvvxcTWeRiQzM 5jWDmSdEtnDhANFUOZzI2DmwRxL05nYy5cl7Zv0EwzIfTpwqOzZmdyHv7MBeCXsmrBfEiVZuKx3zlm50S_vx9XTsZDWEk6gLjEY9OaGXTL0JWFenMvAiqVM3RAV3HdzqdoSR0_CYbuX2dKzAjHtp_1vqJpBTGHj7adwxKPGLKGc7VYDQhWn9BFhX1p h5uXl0WdpNu3sbKQ==-G18AAGRwXmtr8 X6BFcbNuDAJRp8GTRAGzbghCuYX3_f yTAGw3rutVzUZMIvwn4gvPwNlAvkHs9UfM39nWb1Jsk73F9qTq8oUz_ Bj4ILGpIJCqawqMgU=-e

http://fs33.filehippo.com/8745/.../wlsetup-web.exe

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1432421154&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=a0hGQfuYRXuIIq8Edk6aAk4liRBKOdBSOypiFlgI2qsp3B5ltfvnQMh~tcWbrlJWj9xNvMkH1ICT5MYvyU4bbgJ2JhujWft6b1l6flqW2M0k5NUZ2ujJ-xjpnmZnxh~ozxddoC7izN1XmHhx9Kqkv713J2D~Onp3Kf8pPq39LYU_&filename=wlsetup-web.exe

http://www.tagbulkmega.com/JL5jhfahyDrv8l4OxRo 9EweqBXRPxsedfMnGd4bKKPdMYM4R2WiAAPclhXm 8mINfA3BhQWoBI2KNdg18BFHQ7hGFMhJd7cuX9aOQ24uLgN yAwtQBIyvEV9Iokdv6aqZaorhGtdqtWBUsOWs5 Ct1yKMkyxu Zc7s5Z5HzfTiPEpLCDgIzOSxl9LY4KGQhNKavL edbK27inNSPcb_FehM4UCvig==-G14AAGRgnq2tCQzFOmADDlxaBl8oQBs24IQrWc8aQzc0btveLEGzMvhMwDe4jJ8WtCuIvV5Q 2vl xFZ4q_nVaK39sSUlp9T_y399EArogSDUTTOshQ=

http://www.clearheartgift.com/kdS4mPJTtgeaeEmX754pqpBV0SUst0lLx1c_3CdwhRPiE5v Br5QqFMlbQE4xjxF488kCK2RVjamN6Y6618nWfr1KB6iE5XFd0FQLnK7cMqJPnsI ntmF4ML6wqiSfN SxHjUPieguSN4K4lhYodjQ3rKp87V6MOuhMiq_ZboW_yPDz8EB90xrqhQiCIXj0ATpx5l5zf0AJ nZXa_4YDduf0giRpaQ==-G14AAGRwXmtrhxgfQcAGHLi0DL5QgDZswAlXsp41hm54WNetnoNmB8iZgC9oHt4GsiuEvZ5w8zfKdUv 0XaZ9TezO0GhS3lfpV34BxoJIxmGZQicoAA=

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_fr&type=PROGRAM&Expires=1443066913&Signature=DyvfttpRHOK-k0hZrCcyh56qYpKHbfPseiAJXEHDQhE1~iFOjfzUh5Xjl6V7rdZtxSNxJEOCebXwbhAbKOzb8DfhoLBzW1tZKhjR3P52aEnnBxcTSQylIEr~e-1nhneMdb-v3OUDNseaLUDd69K~kM4DXvAzjeTXD~xWnBwEQXE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://windows-live-movie-maker.hu.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKKHoKSjk5U=

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1435027073&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=DFfzWiFEAF5htve2q10JRdBAkPu1l5aFq-EC10SS3TEmbCFbGLHQtW3KkavGk-ixW~Fx-1CiZHDwQdpsU2N0Cs27fru6qdx-6mVep13YARLDrQ~dCKXTC65bu~aL8PsaivhmpMwk4D4RDXkqibwddmZ4q9mEjvaApHtgvwkrylI_&filename=wlsetup-web.exe

http://dl1.filehorse.com/dl.php?f=UjxYFrW5hhMNnczJ8HuzW6hEMtP7NwYjBBlxbln8geb2jduwv1vWsnnj6LdKIsd3FiowfPYi1xAn-NZuwOeoPbZmy88SlJ3SnTnVs4vg83YkS2Ui29neY6BC_NHVYxUe,sbx34RVeBrwoJuXZj5CASj_pgD6pE3Su79VGW2EBe74,w9jCDfmPUBReA7CtIVRcAIUC9Mn-eDJce29WFQdCC14

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1444966578&Signature=eEWsUTONyQ2NMchbopaywMsi5hzcq0up4dB-EDWhLuK9Zzs3CrO8sAvgBa0JlOdLNzpfHe6WUeEl1ONFU8lJhgGPa-kdUG9S3wurshCrmP6qv2t5pbSod18V6pEsGNNbUVeMEzCowDoLX1NzBBtoDjzLihvZLfg33DHcaKJtQo0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://www.applicationsdeliveryupdate.com/aa5Es9tPYaEPyDy4O OuPwfYsokEGM5zvdRcyhWc6GpOoL4W4Iv3p9QJt7 7BfpJtypcRp74xy_ebuW3ovnQeLiEctWUhKGZ SoQpvy3ZbMEeqDqvwgAYfPN1dVMADQQwmbLUvBOMN9fcEUBokMpChufkQvpo9ei7_t7quJZAx6aZmw65CaYbk53CzLlM8AS5n2JXAS3R0vb SihozQe czdCtAADPyMnjoSHJMdhei72IYsI_8UVdupZXl x7QrEYjd2A6KYcOWNoPv3E6VpDpmcKjS ij5QK39sje7wMymNvsgsVfxgdDRhzrC0y_cAv_ZvEfhLoDZSqpeu4tX2TPZ03uhD44H8S8tENFIDJQsNK0zSghSKulQwdEga_HOy CkIX_y2IDcN r5GdHevDITznxNq07pkHXXK0hj2GraRVrTOLraKxDLqRlifpKzZ6ZzSqDutT4Sn0Mo5owXnDVfO4SNw5Le085i2tk9plfYHyLaKg1zVGKnSyMc49G8aUn04Fd0dpZTOwMEad7MLUQK8dAMilj5wHpii16bnpK gPallArVYMY6QK1K_MEV_sNQ3O3ZQtrO3PDgdWdWM9Y_hI8mKkwqGzKt2mOx3jVvuDDl gZMP5isHYyIrfDkfpW5gfKy-G2MAAMTCbTH9_eZQ6QsZEXeDA_YwCNKiwQeQAQeP4fORaKa7ru0SPTU2S_6eheD3_IMlpJBPtllKVjHjdlNYn76mkI_1kUpelNz9VJF0MNBWWNRfDQ==

http://www.tamindir.com/indir/MjAxNS0wOS0xMSAxMzozODowNA==/msn-indir/windows/.../

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1422764407&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=RcWtBGV6gH7nud8VwzgasgRF2qnhxZT7ENUekqkZ6xv2ZgUjE9rHfhR4rCh4yL~ESOxIytk3C1P9jqgMSAAmrGu13GeVwszl-TUozjuecove0-MNtWtU1P1p5TWHy2hCBXm8wk9z4M7kEHF1zlbEw-8SEv1CSGnMtUAW22-qa4U_&filename=wlsetup-web.exe

http://windows-live-movie-maker.ro.softonic.com/start-download/.../d9d0ba1534051a5e76278bacb16ea3f3

http://windows-live-movie-maker.he.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fmKCHnqKnmpY=

http://windows-live-movie-maker.ar.softonic.com/start-download/.../38c579ca1fc189a9e7d95beacbfcad69

blob:http://sd-web.softonic.com/998c2b13-0231-4218-8d77-487b30ba8266

http://gsf-cf.softonic.com/ce7/09d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_en&type=PROGRAM&Expires=1433677123&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UTxEBjKDQlJVYPvVRY8TcW9rLEWcIiW0KCF~RkEmIfM0Q~NnpKTkPjUMuh1nhsgDHoXB4wE1Y3WmRmPVO9M~q9jzv5BzdyDbswOGFquXl4PcqE0KF0HpRPy4FR6Gb6iFKSG6~PjQTehsKK3pH~C-9FkHTg8fX3nFCGoyEqRyDXk_&filename=wlsetup-web.exe

Latest 30 of 780 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.