home

download-wlsetup-web.exe

Windows Essentials

Microsoft Corporation

This is installed with Windows Live Essentials. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Essentials

Description:
Windows Essentials Installer

Version:
16.4.3503.0728

MD5:
f63bdfe7e5fd13db94be233f9a539a87

SHA-1:
326651f4ff0a2cb514be8f3cabda5a326c699d7d

SHA-256:
c10a94fd11ebf7e240e0eb022ba67475b8312b58a8c12ecbebe8a31b3f018d2b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/18/2024 5:33:36 AM UTC  (today)

File size:
1.2 MB (1,239,976 bytes)

Product version:
16.4.3503.0728

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
wlsetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\download-wlsetup-web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/10/2011 9:32:25 PM

Valid to:
1/10/2013 8:32:25 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6119CC93000100000066

File PE Metadata
Compilation timestamp:
7/28/2012 10:39:42 AM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:ouR1Vk3W79LMoX3sSZUDRe2niLb5+Q50P0+:zfVxnsOUN/iL4b

Entry address:
0x366E3

Entry point:
E8, DB, 43, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 6A, 0C, 68, 30, C7, 4D, 00, E8, 22, 46, 00, 00, 83, 65, E4, 00, 8B, 5D, 0C, 8B, C3, 8B, 7D, 10, 0F, AF, C7, 8B, 75, 08, 03, F0, 89, 75, 08, 83, 65, FC, 00, 4F, 89, 7D, 10, 78, 0C, 2B, F3, 89, 75, 08, 8B, CE, FF, 55, 14, EB, EE, 33, C0, 40, 89, 45, E4, C7, 45, FC, FE, FF, FF, FF, E8, 14, 00, 00, 00, E8, 23, 46, 00, 00, C2, 10, 00, 8B, 7D, 10, 8B, 5D, 0C, 8B, 75, 08, 8B, 45, E4, 85, C0, 75, 0B, FF, 75, 14, 57, 53, 56, E8, 06, 00, 00, 00, C3, CC, CC...
 
[+]

Entropy:
6.5595

Code size:
926 KB (948,224 bytes)

The file download-wlsetup-web.exe has been discovered within the following programs.

Windows Live Essentials  by Microsoft Corporation
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services.
explore.live.com/windows-live-essentials
10% remove it
 
Powered by Should I Remove It?

The file download-wlsetup-web.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1485070264&Signature=OgtV~-yQtbaLwmCgjV7CZDLYO1mW0jr6JMKHM9ePntRxevyh0LTd6FkvCqnei0jovroZbmc7-Ote8cKgzds7JJv9hOqtMV-S6t~Vhn1QypOlo~GxXRoH4ZMefaSa~B8mQleyHsitGeIiZpFJyGJ71fFMOWbYGOe-Ss8etl9nWA0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1477252852&Signature=emazeXjs4bxK7vN3D3MBn781DOgFNYlxDLtuLcHY9NY1dXzRd8Lgq8KStUcDbsz5zeMQqlf-t~bOxMkfjN2JNgq70tfw7oH2cWS~WstwPG5XiMwdcIRE7~a8EkIkCLS~0JSyDoO5N8zQJtVRbOa5Heprilpw1-5XaVQi1oa-Fvg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1481225425&Signature=JeSh8sxsR~FwoM5SR~AWfXsUBujgVHx7nCcEuM1c-ENPOLOUtu4Hwn-abU-yhVw4~Ns845UcYWDemNZ7VPFaiM0hnTbDKFJcGYMzxpO0cKABFLsBkzZ0ig1N5IOiy89lj9dUsRDKv7x3SSDIZCMnCIm-Jtl837zXxlXzX5cbhs4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://fs34.filehippo.com/2855/.../wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_de&type=PROGRAM&Expires=1445505164&Signature=fiy9SL4jSfVDTYr5wmjRQygcCNHrEJtv9pGNtSxbab91Hv9LZpHz3Ssg7Jt9vZBUvUnCgqpXEbF6W5mByyCUknXiBHPDBAPBrQUh~1GNQwZhoBCPfOx4JXd7S2BgL~meOtG8HuEBjcTBmdZps7kSXRHDwYQDi25AaAJKTjZjplE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1478731554&Signature=B5rbmiuaFHiaVIT~TpOQGuw6LWjW56Qocjo4zQrwie-uQc7WTsBLu5qRs-b-CI6h11fYEUMeG6cbZGuBqy07VhbB57y0CSEAkQFr3I6QgfkOVGvFYougcD11D24nBDzyk7m4i0kupN1ZpAqvzWdmkp0Iuz6Mc9UJlIEaffF5OUM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1484618375&Signature=eZK1UsHVDCWrPUOEq~KNAaU~94V~euCZW3PRWC4dH124zAC1GHbF7tySUpvKYKH1aKCBmXyS0K3f2gBfM7cqgIiT7KpODOkOTu0azWw2TiXbFsh~s0Q~oeKfVPy0Y0aI1suD1OGUiehQRPPkTbjR2PTdF3idN0DFSr2wGNlJk3Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1469173074&Signature=PIN97Bp2pTwTPM~4d78SPEH5mBhGG9eTpSqhREUasEf3fzCdLf2ITA2yTgKtV2V~LZJsYKqZgFR1P1xCBHz-OK78Q4rhKPdTTRBPvGo0ahOnKSzESHoYh1Z8NGFh0wqulwhn6XB7K18sO3cqYtbrlsExqfrK0H6aEp8Wwjl9Us0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1479946080&Signature=ezWVdOyA4Hz33QQgOKQiitWxtoE-ex6q~Yts6pMTjLEqvZfR8cxl5dww-s~gdBHxZZiZ1qEWnc~~XY2vm~QwjFrEZAKSpKzBzSdwB-XK5hy1bVM-Rpgdpw5kyiUjgUF9sRtSjtb6OLA7BqRGmYtXsba~7NxNjom1UUz2lt80Yyg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_fr&type=PROGRAM&Expires=1483420669&Signature=Y8Fp-i~hr6q37PmHnPkjTFonVXD7U2sLB3leWT~P-YXPY-hHVfp7pgKs6MreX7Oi~Ep8rKpjrGVOnN1aBmth3cCKf87oSg0ySaONj1v5pHLpqI-1iQuDgWcAiZ-SJbvDjgbfHOZxyiEbjIqo8TBIAkJjOPxlIIo5vhiDw1nAMkQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1480923674&Signature=YKp93qxrGTERKJV~OUkDyyzLCnkGpoHWnlzLsgq2QzzZgJas29IcjES6DfgQEFVFNkVTA10xE-a754qp5Nw0cku-3yfKGwWzIHgATICm2-6-XvB3~WtKATiygyLgYCaQevWdx4tkfr0fXxaFH8b~UX8LL82QBxfcchiLJdUb4gY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1468891835&Signature=RiamCmhjKed~-QvxgImu3poAXShG378wisq5tGNBkYJ5voTVA~Tb8IjIMlTtcuzhWqjq-meAlOTyczQn~ZrpNy-driGKo1yJXOGvTWHs1Exfn0kzalg3WEuTuQTeEqieFF6dKy5XM3qqNlePa4oGhYZFwN5afus7G2TeT~ZRiws_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://s3.amazonaws.com/getnow-us-app-repository/.../wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_fr&type=PROGRAM&Expires=1457240687&Signature=DLk32-YK~q27elApQRgBmN4nNivQBijz0Mvghczd1C2Dd0CZnxzxOdrZP0B97a8UAcATw3I~UF95a3R5x7rBhvVUfkwQl-TVW0U-x2AkVUypH1GcYe7ErVgKGYnM0SWpfN7qt-GmigXABQTVF-PV0BoKBwCNOGyaWDEIWsVpkFs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1476153709&Signature=Oi8qJeVHZ7HBgbfOuhBebtU5js6cGWGt4Iz5tHOnHoM~C34toCxr099cWMboFthbTKXgIHH8AO7L1KE2xaA8NWW2oDIjRvbMrhnHbxml4UBgmeAor0CdGD0x13yfBTWRejMJrmKC1echoFveFZWd2eFxMYA~hTb-UTNw2kr4nXU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1465788462&Signature=UD2HvQb9Irj3WKlfdsU-gbMKQH4buVT11V-QqvfNmQvySR-Hn8h4fE1qbw-xa6K3Pb1-RoRtnFfxonFZ2~600MRZFv29ud~SAgi-yVgpqonrF~AiQQL5bkocyrG3QmvjkvLyupFE2LvXJ-WZLPgol56AUn24ZwUg051SOFbY2K0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1470687802&Signature=edVcdqR4typJs7ua08GYbKJ9f6I~3ZW89XYAyQlvF4Ps0Yi2oMIJYfARaMqI-75ENn5hghMKZYpS3tNmbOhQb7Sd6DrXZ4-1545AqpmbAhe2h1dzWgudZDflRnYESjU4em-N6qu6~ftF5w6GhD70Rh~xj5dCwDoS5Pjk0Tn1XIg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1475544824&Signature=Wkjy591XaXO-gUnln5ndvwd0Bu8ZRt4q5grQOPjoy4gdImJCSTTdaXLhJXwJVRhh7O4HIyofp64xte6Qh6n7sFUD~LsDq4iO1wkOuljIt6eQwibUyIDSTT6yULqv0M5QGLhGeUTYhDlSRdQgtmiDB4hgputEEuiDHlGpFFoBoDs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1477021311&Signature=ENRaiSfwIDeHO637L2jywlLQLUucWJ11phxYkLWYV4Osfe9a0ffhXfUMlwo3tfnZ3UyNVmrkkAAwyhE9ELb2seeTwXbUw7aI1QRfAIewoQnu9MI1VS-Ho4iNzW6BYL2L61CJ15tfK04eDuUFbKGql~IZmgjpkU-9cygpkqLLPOk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1471202057&Signature=Ku6R8yVLzLJhiS9dUXYqz~s-M8mmtcs4VGN4A6o6kEkqAdj5Ndae9L-RXagFuSZ~aaM2QpZ5eNMFzaRaAehG1oMad3KuOmpogRUyre08T0QbI~HczoghseY-FRjzwGZnxmalYvAke3Qbw7QHqyRTbTBt7HNUFQy-IHe5uhblzJ4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1468997046&Signature=cOyovgwI04Jn8VcSXvMbwq0sLb1z5pDXcNTN~yAQLXMO2euF3ifgPHZ12ZvkVb8WPQ4ZYvVtiH~Upte807vlQ8~uf96FIQG6ln3t48xJdvt47V~DHbUz-viDkd5igoAYx6O2SnQFZst19y6mxe397CGhJUm7DBDaZxHYd0IHhUg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1476504934&Signature=BOBkeP003ZBRGwb2Jp-WfiArV7dRibAT5SSCKO0CH6lTWMw38IGwGES1MJMrRUSiHgS8TJTZEfGAjsn2oglVhJXmR7EkuO1RgqXzdmYYoEH24tIJbbbRn2BG1sjJNphh-DH1nd~C9WoXFQtQMqzSATLumbecV6rfivtYfb8o9Zc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1472148614&Signature=A8kXP4R2yPnP-VKT2BeocFMhwL1FERpCutghcLcEMeuR0V6ifw29K7ur74Yn8AgucJzBHoOoldfTo25FaDFcJbkZjyGEqS0Mj-7RG0fchSwbqnsGeSQmbuTLktEUY7MJAPasIXcup~Z2q8dI7KPFA5BBKrhfYT3No2oazbgYwXE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1478579108&Signature=KhWX2KMLU49-MuELaOOV1rsjW~5xia65eUIAAEfKZTOwko-SbvDXwMK8i1Z9XaSx7O~quHhyBoqjrecjOb~Z9Mgh-wHJ00iNZLqDzhcqG8Uhpz7e2K8H3wa9mS9l4eEXYqTz07KlxbPzyncU8Gr9U2oJPiWzqhRwX96TBMn4gBY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_fr&type=PROGRAM&Expires=1474847412&Signature=HRTpJ4Shxq6vNDtJnbTI3lV6CQYT8uqN~nRmGShtd-1bjsQLM71ZUBA9Nn~DKGDC~CuPQKwMJWZCbr1bq15dtm4BGwkIPEIVYxO3-2UiqxIa78236ATn2-S-TKimA4Nilc5rnKtyUp5j-ZFN3N4tFIlqDkZokdWIUdHQsRuRBPc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1476750360&Signature=QdJE8OPjybuJykceys4SxTs4ENct839i2SyI-wbG9ToEtHTmDiqxtHJUxsOZEgMK5Mqcr5X4Xeuh8OeBD2Vkto034r6uKMaVNwAkkr6YkuTPztmmjHO83tHqgIIdxfh-ZiU9~PSTIhONWXPsBICq5v3ps3QRM74chuy0iRsv8VE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1478419505&Signature=Os3qOdcEYjBV-LM1C1OIRWpcqnRVZ~Q5VtV3Zw6nEDLb7frTBb3AHnlfHg45w-Z~hVrR7-RQirVJMw5DUdDoorDKHsVdoSQ-vgS9qvTxJkVEGDMfwVBxw-GiHnIOZs2Bm5Fd3ZXomIqHtEGbskTxYyzHGjXipRRhVcBJ3HHXtQc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1470051532&Signature=aPRXwNVZPDcTiJ8qKfG9ngZtPloDGuBnMmgCwoK0rvfg9fv2zsxKgafr6693UmJediJk0LT~3ypuaYDioavseHu8OLqbKDWwn9kfXcdEU3ApIjwnEewBTcuxv2CS7M9tO3LgHpH4OY154LV1zhgxOXgl7ZzOSlzPRRoVCisUzNA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1477087349&Signature=Jqd9-hH8HQ90zCBAtPnGgK5oRXj7goDHdgp8IsHQIqI8yRCl4oAAGBvScLc2~8nKMGq~GNYoXM3r1clQ1Z-1IVYpBNkLHpgBXpy6lg7R-10266CarcfYEtvxHUgbi5bQwrDDlihBAa0bPZMwLOt9dnbI39qADQ5J2F5gw3M6qsY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

http://gsf-cf.softonic.com/326/651/.../file?SD_used=0&channel=WEB&fdh=no&id_file=65589&instance=softonic_en&type=PROGRAM&Expires=1466158539&Signature=Hb~aZi27CfWCLsO626F~tjwjuG8Zc4fssdiP-Nh4YRdpjynk-XszaU~B1UFA4V3SxQk5BRMq5wIWTU6h0mYhJ33s4zNXYrb-ozJ6dpTxv5F~2~3Dz~I-Xhl3TR0kJ0x7oOMf0721rlh6sK8~2MZHF-VpHCc4zMGp-UZrWkzYGY0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-web.exe

Latest 30 of 90 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.