home

wlsetup-web.exe

Windows Essentials

Microsoft Corporation

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Essentials

Description:
Windows Essentials Installer

Version:
16.4.3508.0205

MD5:
5d27cc5a4c360b8cc4ecb4b4f6d74a6a

SHA-1:
d396a5f68f2d139c4314cab248ec480b014d4e31

SHA-256:
131fa2a5ffc553d27e2297f470add97e30fe9256b02dff7a6c9203a9ed918c06

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
12/25/2024 1:52:30 AM UTC  (today)

File size:
1.2 MB (1,243,632 bytes)

Product version:
16.4.3508.0205

Copyright:
© Microsoft Corporation. Tutti i diritti riservati.

Original file name:
wlsres.dll.mui

File type:
Executable application (Win32 EXE)

Language:
Italiano

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
9/4/2012 11:42:09 PM

Valid to:
3/4/2013 10:42:09 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
330000009D1E8D27AEB8F3D83800010000009D

File PE Metadata
Compilation timestamp:
2/6/2013 7:38:56 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:Ibz7O4ILdA9KHjStCd8Xxpqo01fgBOV2ohb5EEt1o:mfIIKCBBpN0eO2ohk

Entry address:
0x36596

Entry point:
E8, D8, 43, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 6A, 0C, 68, 18, C4, 4D, 00, E8, 1F, 46, 00, 00, 83, 65, E4, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 4F, 89, 7D, 10, 78, 0C, 2B, F3, 89, 75, 08, 8B, CE, FF, 55, 14, EB, EE, 33, C0, 40, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, 20, 46, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, 45, E4, 85, C0, 75, 0B, FF, 75, 14, 57, 53, 56, E8, 06, 00, 00, 00, C3, CC, CC...
 
[+]

Code size:
925 KB (947,200 bytes)

The file wlsetup-web.exe has been seen being distributed by the following 35 URLs.

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1435945407&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=elILlLecz~T2bSTYUSTXI8paV41vKbhMAuRIzfdy5y9T7UZUshl13ESuzvgDYD5HXpYSk38L8us0fb3MyBKWDS639FAf3itGlGFuy6~zrN-OwM4SvzeIlmdOKm9ZZWlizYlEHADhe2WkWW3mJlJce6aRsyN3sDe5gpjioW3-IDA_&filename=wlsetup-web_it.exe

http://global-shared-files-l3.softonic.com/d39/6a5/.../file?nvb=20150114072502&nva=20150114192602&token=0edec787813cdd9c74969&SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1443333455&Signature=NRQJ2R5SeHSMIxTDVKDEszhN87lrbhRkkzqXfRXAx9eE0sDY8fdiGdnnwU~amkN5JnDa0Yi~ZUAfA4Yn-fzmlZl24l7FS6yuJr2fCXlxFdeRCoPDtzPlbKWXDFvFP9wCHETGoaLKJ5aDjV-~A2S9AUSlqQ16gXsUxM-i1N20f3E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1444284081&Signature=RhEgFS44eLjwCaof9L55uTpijGVzjaRvqoLQBZ~lj76SEYzfmoOR6ZCcodBDx1pqyuUQJKU4HVGBA0QEwuq9FubZ4pew9BCEGNDTjWTBoBJwGuCwg-q7vsNxKjJPvm3TzNNuKmw7fQZWW1-yvRubhEA3RPGcew~aa3vNaXe8wZg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1445150425&Signature=CQeLdrzg8DwJazOXqfcaw9yRL7ZIwFSaWNa160I-8zLcYhNMDIfiLwmVhwobJe70wxZmEYdNhazKLbnGduZnCNpVORFxoqpvgUEfLsmWj7X~jre-8t3vEuqkJ6se3qO-yOKUi~PDmXFK2TOyil56qNTW58Jkc1nM61W~4HkU1Hs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1443760872&Signature=JlgDajK8TdXhA-MUl4oXE4GHsgqGw1cIs32tdTen84jauUhYNTzzVSH1tPXODLKXHRXS~GhhCUIaOkU454N1n8-puCfSxC4s5Cbl-9AzQqxIEYUgmmKEp8Sx5ReCArE1j6hO1oNZXJPi2A1CoX17PI2HHXqvZrPakRziN4G1QsM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1423692843&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Hb-CQvEERmIr6it~4e0Vrp6aj6UvRSXHihTK5enrUPWYBI47x5cO5uRG9Q~cAl9zc3jVrsPtPKo9orBwwo7lJziss1Jp3tkghOyuJvqIz6jGIHzVhTAirQyPEs1lI0tRxhHFBvur5JgG3MplxbfI4C2PczrzPqgk6HTSHiGRmrE_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1440881936&Signature=Ac84fSJ3C1V2tJ6UbgG786w62jt68pNYTIvzUYB9fAjM5s5V-~CF1sXdEvs9oXRj9B7O22YK2irm9fmSHlTUNhUojtArSJkOonoGWyXlkOxyw5DwETs891N9J8OHAJE0xqEIVpC720qGzqK~Jjw9xTyKoxbjKeAynCe2VAlZep0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1438042073&Signature=gaEUMqbrDJcDOCG~E7wmJSbxwYZm3h1elW4a1u2CCsQe2y4c8siTsDsXlFGEdkMIyxRockoyFZnDnlQ8kxNSHgUSOTntAdLxUcLFyvqTHI5kJlOUWA-XxGNaPxKquNlbXnBvF3vwLae2H9cgjB4Ws0dhIxGjcnZ9GmZedfZH5Aw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1426464782&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KfXfEAHbF2uiRI4WJks1vtO8bOl490g6jLhI1NPcmj7VloYKBAUGsxwG8hxaOq1lQAHDn1rk2OkKSoc5XFH4D7DPPe5oLEE7skAahgLaPJfHH-cWzur3KHM~y7C3HzIpMVq-xDYUEZf4JAxsgv47B9liX6TAH3tmhf966ehX0eg_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1438029914&Signature=W6ItHEKji4mPKZM8eOLwmOWgN9YskQ1HaJHuS5d24NtpPpzjE8L7hfrG05aMZsvHTQ2AgEWoJqUvewTNMRXqNarUSsUb0lX4D5aOWDN08f4bcqq3OkqYM3zMX5IDs36D1bpFyhTdXlA0DMF4S~PL9Z~PVsgfwW71lv6aDlz~5~k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1441232213&Signature=BXXs76n4u5BtjC8U8cQMWPBFeD~9~spkps3yPgdSeL7dtxxv~cxBrgsSlDBadkzIFfqjPgjQks7CvTYKyV9dP32bOLnH4fwj8Au5OwJ3wQIMO8-4VqVaUB54B8ij1if7EB4d-Xu-xYPeCbgMDGXLBRCDo4eQ5lkE~5BG845igXI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1432072266&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=hQW-Q5A8oMj-E1Kpp4GMprE9ClgfsZ6bjeXocyW2~TINXQqxHercVS6NDAW3ktSWVLWZckY8ASUs1Q-A0XdyO-f9HUgy0X~O91VuiZ9W9lerYZsdHin3Qsw37gNz8Jkmf~bcan4EMEjaDCBm6eiuwOXPGkNXEj3QX6wWraJ2-qk_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1440838122&Signature=Bnrmus0W~VlyngJky~InOnjgHf~E1ymFzdHTES~cvMsv5QeMp9~Pk3ZajNeM5KG7oaTFHpqH1-yC-vrRF~BVUrNcwDkPCBVUF-UgtQQb9LwFZ1Ickqqbs3i~DFWDjgjKaW3LrVo6XiEM9qt8lpCdLUFcTOlzlcOCjtzElLzTaJQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1430177167&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=MsXDUOFbp1kXaOjYatv-h0gl~dd3mTcCi3z~Uuw3~kfs5nQJ25aQ68Iw7~9TegNwuKJhc1w7-i9crJDvk7ZYeM8JeB8f6~43sQNHf1KeI2bVSweV6ogvUKyjV7Pd3Ja~ojxgT0MMUB7k7JzcmLekuoEeSXQLQPWqyQ5ni3pXX10_&filename=wlsetup-web_it.exe

http://it.kioskea.net/download/.../scaricare-235-msn

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1432929059&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=C~nDQv8SEAbSP8TwoGZ-Y3gsfLE5HVia2RNMHtm3VLAf7Li2eyHrO1pXZy6icJQCVtIQ-6efLTdZrff90mtUqtNMYWIdO8Mhw7f0akGWF1TBL~YKLxDnmJzMz3ftuiKtvkZmgA17G5ZLkg5p7gNmO1vOV1VXawnoYfrMxFxmteQ_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1435765639&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=W1rEC5NYV1m9wgsVZy~pFUdccDITEvlmQxgAoITv-drgOxfjqoCM0-nHffmesQDG5M9MHjWfw6LKaNWfivNjrDG1-~ssAtIfOgzmQPl5RhynFhSdlQnZSjZU~bJ4HkiIk~CeCVTrSyauppkVkAN39UZaQj93k8NKlDwbwaUHs48_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1434823884&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=QUrwTkLJxqzgPXuFvQOJ35tioSqFTqV7VefFoyyC58fsfgOaomzL2KnIBxx2qoi3B2Y0mNNE49k6o-oduvguBPPwmrP0sptcvXtMbAPhYVnzlVkYT4hppp6qUU9i09q8FNexPlILWSojiS8lZbEl8rTVu4Cijdzv1jUYglAW8NQ_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1431730447&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=L0VOsNgb6SsduQig6vRCw9Cwxp~dSK79JWhithCfE-kzOEv1KjRGpuuKjVwXva3MWOidij-8X~5hAc4FsR7HdRA5gj3PxUS6azQYN3u3Z4ok9Id8INvya54IAaXiZf-3r-hx4PWjgguAhmH0HUBQSofCa1JhP51odiBgEmrdEEs_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1445312201&Signature=iEFixXudEiAVax-FMCPlsFxWnYpPGZiAZKaLiQQmeL9yCLY26Qf4B3g3XXYoEUpDeTXEOSlKPjxoBjecREgI4TEa6FPGYSGaMdQcS7kf0lhk8PnGI9rMOmGRllRBZBFtdHN~VuwAdYtZcudhJtAVyIuKyRCufIRtNrSehI4M-Dg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1430193408&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ZavD6p17n2APvnFoZQg09qqsgZKj28cL5u9PTCfq5enjWAHbRKsWBJ9VLgcZ-1yUIw2KwBd4RRAoKqHeV1CuA~HbkyJpyB-EmeEr-FQiXYHUHQVDj98hsK3GAY2kUt1Wky4gnBrud-gIZAatsllD6Ms5KaEXCTnNCMFQYR~wP~I_&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1444331471&Signature=TAq7CzukAxiyxI-7ys71zCpmCPMBNSc3Z-~VEBeO4psI-XYh9vv8o2pBHjAjheoxcbnGCVvNtJJeW9FT9Fo04SGCr-RgnuAljhiWsD2sS7xGYYguICCmFFH8ZZVD-6F2Cwz2Wq6ARMdlOErBWFUJXoR3Li~hCeZ18mh3qFobBCs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1439169892&Signature=hJglUwmHH5mi6KD0rjiEEOzghBZ1cQXH1gTeKPG5JogmO5icQMNzpLa6aaw-P1QHYOUZFG3XKL9OJoiPPQNkYaz58oEdr6Sq-kO9S8xUWVU6ZV228lc3OcfY~2eNUB0Ue5MXPuo5asaD3yZzfR2l2Z0bylCqdSKlWWK4dtOMJ80_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1437613746&Signature=iJO-YqsCJ1lqcf~xl5KiRtRxsp5dWJHgXVcy6C8mhGtx3N4viwZ8tbq19mKmUFCWd1BLELEWUxKVHBasqcdmJIg77oS4qleVP007-Sry6wz2ijlqoRXJznUwgY-2Bzb50BuYz9QCBdxORKoH657ZytUACSiAvMTPOmEtMdeD8YM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1437091431&Signature=HjdQMsjvn15ecpdxZOyYOtEPilvr8rYyiss8WphfA8oykMXIpQbiZlU~p0lNjTXg1LUw-Hbp1lj60wnnmAO0-9udxsU544CSKu3kHAqyTXW4VxGZFs2P1enT1Ecns0vKbccCUmYijtcS27fya7GhBdpX3T~93pakq7fuCw6c-Ck_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://dwcdn.html.it/index.php?softname=wlsetup-web16.4.3508.exe&code=1401529613&q=NjAzMDJ8d2luZG93cy1saXZlLW1vdmllLW1ha2VyLTI=

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1444798592&Signature=DVDd-vmI5LinIlnvgYvl~l3T7W~Gh1lc8l~EE5wrHdY91MdIBHjaRfCKNCwA1EzR8YWZ08-x110ZqNCgEwrJ71PUPaoPW0AY174rJv1eRrD-MEnNRDNR9HcUEa2xQEjQAxQEjU2LibLgdCW1AXWEzeSGOviczftfTz3ARZZUbEo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://gsf-cf.softonic.com/d39/6a5/.../file?SD_used=0&channel=WEB&fdh=no&id_file=74149&instance=softonic_it&type=PROGRAM&Expires=1443312015&Signature=X5Rwm4yGMh2Em00K5J7vs-gTEeYKQosHgIm5J7gb7p2GJRqeH7hHpd~Sgu-CxgDBPgpJrwP7bJgkG5lcNVuGQKtbBZH-e4o2WKyzgjNOF1RBBxECG76BcabAwk~y3hAGLLcqLsW2ONeNs2yYgRsLtEzWhYXLPynlD6ONtnTFtLE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web_it.exe

http://windows-movie-maker.softonic.it/download-tracker?th=1/.../ MtcOkRYkGIi39OmZIUZF6VUDEpz2DIGvdTnooaVDlo7olKkKouiGR85I2RTSrIGqiEBNzWgTv

Latest 30 of 35 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.