home

wlsetup-custom.exe

Windows Live

Microsoft Corporation

This is installed with Windows Live Essentials. The file has been seen being downloaded from windows-live-messenger.el.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Live

Description:
Windows Live Installer

Version:
14.0.8089.0726

MD5:
449bf783ecf3d32652c9fc0205b26705

SHA-1:
26a2a2c0c9d0e4bf74208ee6947f66a37d04db4c

SHA-256:
84e1a5c2538876b6bd01e599cfdd8c7956ef8115ab9859763c7a3127e42b0d41

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 9:15:49 AM UTC  (today)

File size:
1.1 MB (1,146,696 bytes)

Product version:
14.0.8089.0726

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
wlsetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\wlsetup-custom.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/23/2008 12:24:55 AM

Valid to:
1/22/2010 11:34:55 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61062781000000000008

File PE Metadata
Compilation timestamp:
7/26/2009 10:01:06 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:lslvRH5dfvFfdXqcOnre1cCILumZnsYwsEaT1nQ6Oy:+D5dqciL7umCRayg

Entry address:
0x2C29B

Entry point:
E8, 91, 3B, 00, 00, E9, 12, FE, FF, FF, CC, CC, CC, CC, CC, E9, 1C, 09, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 60, D0, 4B, 00, 00, 0F, 84, CD, 3E, 00, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 0F, 85, 9C, 3E, 00, 00, EB, 00, F3, 0F, 7E, 44, 24, 04, 66, 0F, 28, 15, F0, 45, 40, 00, 66, 0F, 28, C8, 66, 0F, 28, F8, 66, 0F, 73, D0, 34...
 
[+]

Entropy:
6.8424

Code size:
721 KB (738,304 bytes)

The file wlsetup-custom.exe has been discovered within the following programs.

Windows Live Essentials  by Microsoft Corporation
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services.
explore.live.com/windows-live-essentials
10% remove it
 
Powered by Should I Remove It?

The file wlsetup-custom.exe has been seen being distributed by the following 50 URLs.

http://windows-live-messenger.el.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-enKOJnqWilpQ=

https://windows-live-messenger.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOMpp2mmJU=

https://windows-live-messenger.tr.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKOMp6GgmJs=

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1478236099&Signature=XMy77hq8LK0rb9t5TDZcKdiiwzxhsouk3Ld~e2ibdMBJNwK6LH-NoEy6PG~xL4Ge~SK9F7JG5XTbfsHmP7jCclqpQWz5gVKS3NygCmvIiEhITuysz9dO-jzpKS9akX9Hpjgk1dodgaB70M6JAY3ju20HZ5HJSTn9D3D5PtezVYY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

https://windows-live-messenger.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKHo6KmmZw=

https://windows-live-messenger.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOogzT9zzKGoekCie5W5IuW 3OrpBLzEjN pDpu0f4VAqrY7bU7W84FQ7ghmYvt/p1f5QGPQYww68EsYH0NTBQTRBQ0W5tXz8AcY7 iAT0J6h7qtnDyCIadSBcTKLKhpdXUm/ Hrc528xsFA4f4UO7Iyylxiyx/fz9MKKaEKH48essIDwQfUkm1JYj2to/hUXQZPEy3ovqIlID3Oe0qLOwMcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlUfTlbyzBOMXvRn/xxeWib3yT8rupetv79dgLozeaa2rtAb0QI3Fu6aabzOARJy8DZwmnwazoyhkPDpVoFROAAIEelRxuvzL9Rw7bEd0CC8SYfc/5Fiv8grEnZc0XFkp0kMenhigrmuFauzqktbh6n0MLBSM0Z10zU6iOwLhkMmC/.../MH3v bZnb

https://windows-live-messenger.sv.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKKQpqWjlZY=

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1482528336&Signature=YXNFAJfAo1GXkVeBfCdazgXgJU0UnNIRWP7Q1c4X~FJDF78dGErudEPg-~DmDywiiOIIrHtfrqa63fDSa-SHrzQ2Ziz5QWu4ioCJqeMRVBX8SqKhvFlxWjnBY9Qp8OsKy6f42xlq0OcsyI4yG1aDmVSSgTyZIL9NA2~Y41qsDY8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

http://windows-live-messenger.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCQpJyolJk=

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1446180044&Signature=IdH0OpGALArVGULbvTeX1pMVYb1vDo~ZN0nhi99rfKrzM38xBSmM5lds-wOwtn3queDHLvr-pOi-UWFtzyJN9Rbz6OeEdpRsEVz4x5b3P6TyhXYAXQ8q8zJ-OujSLGNXzDwB3e2Qj5xRSEKpBCioOfMsaHia7xZslJO4~C5oWOc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

https://windows-live-messenger.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOogzT9zzKGoekCie5W5IuW 3OrpBLzEjN pDpu0f4VAqrY7bU7W84FQ7ghmYvt/p1f5QGPQYww68EsYH0NTBQTRBQ0W5tXz8AcY7 iAT0J6h7qtnDyCIadSBcTKLKhpdXUm/ Hrc528xsFA4f4UO7Iyylxiyx/fz9MKKaEKH48essIDwQfUkm1JYj2to/hUXQZPEy3ovqIlID3Oe0qLOwMcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWuqo32WVk0iZOURJv0sA7FmFNg0UlIzgOtNwmrinkKWpUsB8gw6Rw1TQQA3qBVgYwHpynsvdiJl8yaMNec2Jz7mWLAKC6MgrfkoEHlQRNsasQ7drOJX3bRgl0WvD2qV0B1 TOmPxMs9TF3ZhovxDixkt0T23fQZNZqANVNsdazAVyn30XLeTW967o3wRUB5S6557DA2G4JDXhIEd7O8XH XoU5pLT/.../MH3v bZnb

https://windows-live-messenger.ar.softonic.com/start-download/.../ad9790f6cdafd60121f621efa8d7dd23

http://windows-live-messenger.sv.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGHoaWhkpo=

https://windows-live-messenger.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOogzT9zzKGoekCie5W5IuW 3OrpBLzEjN pDpu0f4VAqrY7bU7W84FQ7ghmYvt/p1f5QGPQYww68EsYH0NTBQTRBQ0W5tXz8AcY7 iAT0J6h7qtnDyCIadSBcTKLKhpdXUm/ Hrc528xsFA4f4UO7Iyylxiyx/fz9MKKaEKH48essIDwQfUkm1JYj2to/hUXQZPEy3ovqIlID3Oe0qLOwMcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWmyBPTeASEAiFj8uLI1fdCYXJz7WuJhK i21m2fpxQyusX0eK3pn/bZ79/8ugtPw73//2RCXtiLjmvr5icMM7NxYdT0C4QBiHgrrwnKRdIGjBF/zwlockE/WfYfrXOluZc4Q0vYUAf/iY J0GwD4s1AKPUVt4wu7fW5z2eRsHyEwoCqYeSedVzwZDI4qBrPXibqWrqaAtOVUxDunnHJkkDJIfsWl9kY9o1Cq0NV6NRw91r4zqxxLyt8kr4tc/.../MH3v bZnb

https://windows-live-messenger.sv.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKWQn6KglJs=

https://windows-live-messenger.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGJpJygk5s=

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1439475158&Signature=O~GHt3ZvWq8FcFVQsSdCq-qpDMR2boJyuEO3w1XumYYpX0VpjuAs6HNZJWq-uQC8rp9hQLU~uRH2KloDaUX1tkJmW~2gAQfKFOqi4oiQGMldo1c9Vj0RuboB0gA4khgShxV8YiMDXTBCSKxCxOc8FvW1IyYqpV5ieFjePLim4wI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1480954256&Signature=NbezOR~AGJms6zFh-TiK3GyPE5H9h9SS72bNGu1wp8hBJxZ8z22xrn-HkH-sDSlauHZfmT2y65Mkg27xp8cdKpVux3EeEFWEExa0JNjgCg8nlq0VfjEGmPXF9iA4veqeDfqWl4ZHnZB7KhdsktxwK-u180g1oCMPIF973f1818Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

http://windows-live-messenger.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnJ-LoqCfmJs=

http://windows-live-messenger.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKGHoqWjmpg=

https://windows-live-messenger.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOogzT9zzKGoekCie5W5IuW 3OrpBLzEjN pDpu0f4VAqrY7bU7W84FQ7ghmYvt/p1f5QGPQYww68EsYH0NTBQTRBQ0W5tXz8AcY7 iAT0J6h7qtnDyCIadSBcTKLKhpdXUm/ Hrc528xsFA4f4UO7Iyylxiyx/fz9MKKaEKH48essIDwQfUkm1JYj2to/hUXQZPEy3ovqIlID3Oe0qLOwMcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlUXi5wL70xAFNk3aFeZn3Q9H5f4o8hQvEb13 QeqMTiRA4UH9CNG2KNF8pUHzueGI8HwPCX jVfHs7y6MbRCaQYpPT7qmfM9DvappC20frjb2Mx6iQmaOWpwSMc/c96cI4dxlXtd1PK8ECueXIW34GoGKAXPwiOb2Tbc8o9r6Q98NwULlRPtQegsMwxKqVSJTL/.../MH3v bZnb

http://windows-live-messenger.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-emqiNpaSnlJY=

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1484078159&Signature=cJwGbqDRfdAyEguQoSSLTyM51LhDBYP4AZ0~BXq9rRb6cfRXPYWVkzeAmWc6GpZwvADu7Dxl1j4wAHFq6vUw6eYVq6mOhe7wOEJU5FrgHDtjTRM3ZL3y0As0TzrKv16hBjyrX1SmUh7GsIoiISi7S-5~5p08GvKHl7FFmNeO1P4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

http://windows-live-messenger.ar.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKCQnpygmJw=

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1487895061&Signature=VTXHvVx1uGwB3QiywrG~0JaA~AGYBAdpBamVy-sBPVLyqMM7p3JwUxhDAWnvo7Dp80Y-1rsdUM7vMWKsM5Oft0PRiHCTidAf4VFWyPZ8uMY71BNgZ9ie739pyLOYEC6KGO1ZEyZwfE8iqd2e9jN4UHUsZ~-uigc-BjRObuGOXfA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1486599415&Signature=S3LnC2eYZhzCCPxQ8LUZPyFNf2tiazGyHVWBftATWPc-vf5mz7J7EtpQaE6TL~ESeBFXmAbGS9ojBSoV58V9rPXD4L45WIMXpKYs6DKr4QkTSRJ8yDtrtpVBko3QDbN-MgUeRSS7WEIb0q96OQ6LdNBWbz6-SNcMMRJ2R6vncYw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1447053047&Signature=f9jsNt9GDy6duMKccQxYXb-3SfL-Om9NX4iF7clglE4gqYikwhH7WOHRM02CGUqeYZtieV9BH06WcB2UPxnIth7jE0NQ~ebARlvumKpev9ambi4Vy0mpF02HwrTpQn0O6WWGaZDQeN-iqdb4ACjA6ErDeozTBvz5hdPgrj7mAJs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

https://windows-live-messenger.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOogzT9zzKGoekCie5W5IuW 3OrpBLzEjN pDpu0f4VAqrY7bU7W84FQ7ghmYvt/p1f5QGPQYww68EsYH0NTBQTRBQ0W5tXz8AcY7 iAT0J6h7qtnDyCIadSBcTKLKhpdXUm/ Hrc528xsFA4f4UO7Iyylxiyx/fz9MKKaEKH48essIDwQfUkm1JYj2to/hUXQZPEy3ovqIlID3Oe0qLOwMcBPWu3vtoz4Lp4a5uOgmrisykwROySkzbP6ZZz51nlWERk2irpd8ycDiTEGrCb4hXQPMEbaUU JyUhZtzkCkg/MMGfoiZTHw/pg1nQJsAkv2HCdPcYQ796PU0xrYUZqrnOZco3VMesqgO6TAW7ladDkA4vET2kKzpmS73D7m 0pAA XEzBs14j TmwveUCgPtR7ubsApdn9HIlPh4kjbac7r1PD6ayJWlo7SAYWDxITYXe1 P9HcWQN03OqKMz1kCyD/UzqywnfrEooZGAIeDLPYlr/.../MH3v bZnb

https://windows-live-messenger.el.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-fnKeHoaColJw=

http://gsf-cf.softonic.com/26a/2a2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=51494&instance=softonic_en&type=PROGRAM&Expires=1485149311&Signature=PeO7EyZM5X0DCIztPAKomgYcesTM1fFo2jUIqzf8EC1Kd1M7HAArei7olZpu75uky~x5bBV0OMLMKz5cIbtmb9SFI4rTMHkUO49S0cBGS2ORjqN8-KD8d3KAmPTwfQ-CdS5DjLZZBwsCtL~fAkd1MOK7ki~VAXApONCLl9QyUC8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=wlsetup-custom.exe

Latest 30 of 202 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.