home

wlsetup-web.exe

Windows Live

Microsoft Corporation

This is installed with Windows Live Essentials. The file has been seen being downloaded from letoltes.szoftverbazis.hu and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Live

Description:
Windows Live Installer

Version:
14.0.8089.0726

MD5:
770dc23c58b642cf23432f8c6534774b

SHA-1:
d3cd40ae1a6db9a51cc6ad18d79e35867b0f8f26

SHA-256:
8aac38667d581fce13a2eac560a17a1a6e40e5e16e85a64056b96fbf094f9ec7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 6:00:44 AM UTC  (today)

File size:
1.1 MB (1,146,184 bytes)

Product version:
14.0.8089.0726

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
wlsetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\wlsetup-web.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/22/2008 5:24:55 PM

Valid to:
1/22/2010 4:34:55 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
61062781000000000008

File PE Metadata
Compilation timestamp:
7/26/2009 3:01:06 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:BslvRH5dfvFfdXqcOnrn1cCILumZnsYwsEaT14Q6z1:KD5dqcii7umCRa34

Entry address:
0x2C29B

Entry point:
E8, 91, 3B, 00, 00, E9, 12, FE, FF, FF, CC, CC, CC, CC, CC, E9, 1C, 09, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 3D, 60, D0, 4B, 00, 00, 0F, 84, CD, 3E, 00, 00, 83, EC, 08, 0F, AE, 5C, 24, 04, 8B, 44, 24, 04, 25, 80, 1F, 00, 00, 3D, 80, 1F, 00, 00, 75, 0F, D9, 3C, 24, 66, 8B, 04, 24, 66, 83, E0, 7F, 66, 83, F8, 7F, 8D, 64, 24, 08, 0F, 85, 9C, 3E, 00, 00, EB, 00, F3, 0F, 7E, 44, 24, 04, 66, 0F, 28, 15, F0, 45, 40, 00, 66, 0F, 28, C8, 66, 0F, 28, F8, 66, 0F, 73, D0, 34...
 
[+]

Entropy:
6.8422

Code size:
721 KB (738,304 bytes)

The file wlsetup-web.exe has been discovered within the following program.

Windows Live Essentials  by Microsoft Corporation
Windows Live Essentials is a suite of freeware applications by Microsoft that aims to offer integrated and bundled e-mail, instant messaging, photo-sharing, blog publishing, and security services.
explore.live.com/windows-live-essentials
10% remove it
 
Powered by Should I Remove It?

The file wlsetup-web.exe has been seen being distributed by the following 44 URLs.

http://letoltes.szoftverbazis.hu/Mceb74x4UUf1RZKxH8JR1Q/1487679464/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/W10mEC0dv3yAYOftiYLIVw/1455090040/.../wlsetup-web-mm.exe

http://download.microsoft.com/download/B/C/7/.../wlsetup-web.exe

http://letoltes.szoftverbazis.hu/TG2tdGlnEiEe-BdqQGekHg/1467743742/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/1DgSgflcQaCi2fqe1791Cw/1483173995/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/AqpncQ-MnvmWKsG4YNhrRg/1478467508/.../wlsetup-web-mm.exe

&onid=27064&oid=3001-27064_4-10920663&rsid=cbsidownloadcomsite&sl=fr&sc=us&topicguid=security/parental-control&topicbrcrm=&pid=11379740&mfgid=50119&merid=50119&ctype=dm&cval=NONE&devicetype=desktop&pguid=6fe4466ddd22f36e253b6fef&viewguid=bYTs2rdYzDrJ6aT5iwg3C1c5pCMcmJ@mD6Sp&destUrl=http://files.downloadnow.com/s/software/11/37/97/.../wlsetup-web.exe

http://letoltes.szoftverbazis.hu/l86mrogNzg5g1jBZxY3vrw/1483379655/.../wlsetup-web-mm.exe

http://www.ranchmetabits.com/Ld55pMk9qtgCvKzDjUkuaKTVTXNrgoPE8YByhWUfWL3RuwcLKAdZiWUO7EbRhRhQXRUvUgOQQurAMoBxZStt2sSKCB rDieJG4qfmOWfrgrkFnfzA026xXuOeMMHGDyZxRcaH9NsRv noAtF2MQEP UmuyX5QpEgEsU2r0Jo_yFjo7EaQAbyPeU utVfL6dhv3NJ_B8M-G_0CAGSqzX PB35bROuYPRZLAheGRSyYwkQO2NtiiPkk9t448GSNkZ9FYK5wH_JvcaT7d8N7pWGPLPH9avjlM JCrq_tw_F2Qs8nRq OESVQ7EGiHkuand1Gder7jmO6vb5iTzUPwWN2z1hpzRjJa58AqHYVrmqFydjcZ_5EzTWhr5nNvQi9mSkPe WJvQ22W9X28OCY61VbkXrzeHEJb6gWsSrifEtsy6fIlVdUrwwgksVsdvU4zMyBkhf5Q757NgddFwb5qkHuvjzbtd5BXAaQGzFWycSc7nqtK 93AqJguzsGgBmQSBXCZRvzkIcOKuUmMmqYad5Sj18yu14wXgcQRtaLs96uekW7nKSBGUntHKeZdy0iXnNJL2ladVqvumQ4_qSeFhdIQat6k5raictgn8T53bEK8jpwl2TO7lt7VKExOMN2ry xfkVPUCoiYtwpA9Ri3ppUm02cpMcesBwIIIrjRUyFQ 1l0ObLp3GKVfyEIKGg2nUIlatwvvrWhqh7XfHpdArJ4ydRDnFztI4lv6VyLEOPzadikalG3aIh tBtvt VKRjoty10lD272QtmqXGq_OEzlcAXQo4LoGG3IrcqgQmbdS8Hslzrqj9FpNbZEniKeKUP9QFwHeZyQHFEd14jOhe720VOlqHtU8k8muYz_NxTw0jt13d824hKhYOfHkFpXfBN5Cft_vlNxXiet4OM zz51UKJfdQvkH0juk6SkKzTdVb sFkyshkn 6g_h5t5oZNSg4kZP3k4a_

http://www.ranchmetabits.com/S62NUhTZPJtQp DYezuyCq3irMfk 7tz0yXlVKmSKWYQcvwdo871fKtsGAsleI0CAirIVYssWTd_fjpZwT_fZDlj4fOkF48LKbwdgliSgkHlj1fNzX94ZSFmhvHkVHicDrA75Ngi4yaTLT1OcrsRJnOAsldVFso R__rvuc9uEwS61sL NK5R MCE8sv4Z 9yD8fzWqN-GxEDAGTMjXAcqCDWOiK6EPd7gIkcsLfFEPNJ7L1x4MkaIz LwDyLe6mm snv6cJ7qpDmrdp2RtptaNGd3WH2SBQVXtL3a7cgl7GMjKjUVeLh3K3o sVKoS_qw6dIjXaoAkU8Mn6GgqntIGTcvu4BFTPxmlZIhwDTpWupXpxrP HYHJvyh1M87jc080kznKmOGPBPyGMGRpP AIlhCeDyTMzws5LoE EP6ZwfkkX5GNcj15d1Fqc8WXOLKNWg3DVXulflLLI9oV7STVG1oalxzWHrwk0IbSqtwXCx9s3xWXqJ0qM0_iXLKJA7tYhzlO5Hsg7jAcoTI1yuUICnbu95y5PsP_QQHgJA8mXeBHpa26pDhixHBGaQ8UBqIG72kk5rnMT86jHQ4WU_iJUyVnwYY6Z5s_HJ1vXcsnaNvSGhbu9r _YK lBj74AhnDqRzjr9SISte2UfSg9UZek1hS3NNw3BmpSWi T 3NbdjsO4hZuDA6hlyH1O4FQ9eKJp8NCBjY3h0_ft IWRg736sFFCcimV6wrh2ZSqbsSs6SFfaxZ3PNqp75jV9VqMkOxkP1s_cxHIozaS4G69yBlLqkYVR5bx81suV8 j0KwPU4R09Cj1GPTqmTinzvwR4 Nxtdhy4YaAvglhx10WPP1atZR45FdTVJ6QKesucDEAhuIu8A4HMPvmDakcYjJXTdNeIc8OxhptTQeUuDd lRCGYQQPq0PKDzqD4nGrVcDa_3wduKW4bauETdkJBfxKtfh1UDyiMJ

http://letoltes.szoftverbazis.hu/pIu21BPeSEs_Z5eVSTaf_w/1474995101/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/UTLHQ4RgQX7h1lBl3ze4SQ/1470158173/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/Pcp_uGkA8eByFaaw6tDdxQ/1472547079/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/trPy-91GUaP5t5ttv4dRbw/1481218329/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/DBWvwAlKmVHUErf6AmY1Ow/1469354783/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/M2GovKps-ZwDobqtqilf2w/1477587151/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/x-k_3dlYu_T_8AkJH8BLaw/1480018305/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/LGNZFcQuVcAE5OMpBbMSuw/1472302656/.../wlsetup-web-mm.exe

http://files.downloadnow.com/s/software/11/89/65/.../wlsetup-web.exe

http://download.microsoft.com/download/0/9/7/.../wlsetup-web.exe

http://letoltes.szoftverbazis.hu/ViXuZXLZIh6_jucmooavBQ/1472829964/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/yEC0Fn_k5z00kQC9wE0Egg/1440665237/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/kPPN1tVr8Zi6eFaSF6VGJg/1452760041/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/5qmHXPRu1Cvn1LQtK18MYA/1460887817/.../wlsetup-web-mm.exe

http://letoltes.szoftverbazis.hu/bSrqQehcVi85JEB9N7VmkA/1467308519/.../wlsetup-web-mm.exe

temp:wlsetup-web.exe

http://letoltes.szoftverbazis.hu/taP_NYfEkh4j33VbzeSKMw/1461097857/.../wlsetup-web-mm.exe

http://files.downloadnow.com/s/software/11/37/97/.../wlsetup-web.exe

http://download.microsoft.com/download/A/2/6/.../wlsetup-web.exe

https://download.microsoft.com/download/C/4/6/.../wlsetup-web.exe

Latest 30 of 44 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.