» OneDriveSetup.exe
Overview
Analysis
File Details
Programs (1)
Downloads (93)

OneDriveSetup.exe

Windows Live

Microsoft Corporation

This is a setup and installation application. This is installed with Microsoft OneDrive. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.

File name:

OneDriveSetup.exe

Publisher:

Microsoft Corporation (signed and verified)

Product:

Windows Live

Description:

Microsoft OneDrive Setup

Version:

17.0.4029.0217

MD5:

ca17a9ee29a4617b55c1f9dabb7566e1

SHA-1:

d9f0edabfa6a3e7589c4ee9f380ed0e5d7f8943c

SHA-256:

b150d1ba50976cd5d993889f300f5d267654a2be216946c2372fb4db3e4019ae

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)
Whitelisted (by digital signature)

Analysis date:

4/20/2024 2:56:46 AM UTC (today)

File size:

5.8 MB (6,072,008 bytes)

Product version:

17.0.4029.0217

Original file name:

OneDriveSetup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\onedrivesetup.exe

Digital Signature

Signed by:

Microsoft Corporation

Authority:

Microsoft Corporation

Valid from:

1/24/2013 5:33:39 PM

Valid to:

4/24/2014 6:33:39 PM

Subject:

CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:

CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:

33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata

Compilation timestamp:

2/17/2014 4:13:48 PM

OS version:

6.2

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

98304:6SA56742/VviN3TjwqdiMEkuEghcZuOd1IRifMJgz6ZTewKvmL0X0VtJucGaJuC+:67cr1iNxILqAOgRifgqVP+QcGagj

Entry address:

0x50DB8

Entry point:

E8, 72, 32, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, F0, C0, 48, 00, 75, 02, F3, C3, E9, 83, 37, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, 9C, 13, 49, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, F0, C4, 48, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA... 
[+]

Entropy:

7.8188 (probably packed)

Code size:

552.5 KB (565,760 bytes)

The file OneDriveSetup.exe has been discovered within the following program.

Microsoft OneDrive by Microsoft Corporation

OneDrive is a file hosting service that allows users to upload and sync files to a cloud storage and then access them from a Web browser or their local device.

onedrive.live.com/about/en-us

6% remove it

The file OneDriveSetup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1477473785&Signature=W8E8azUW194mvbjWVffd6rzaeXttH7jDh2NBE4tJ2NOGZwHfvEKHOITITzB5rbLNEmD8nglV3vFd3tCEh~SY~jWgLSwCf5HamZiRTDHS~dqif2G60MaMD5wqT3K5uov-FUY5bGuFstwKuy6jGdOuG7P1XNhehu0lpSCs2HP-ahc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_fr&type=PROGRAM&Expires=1482015510&Signature=H93~VHccnK8axd9zEqZXJ6XmocjaXeAdNczVTdOwJs2S8Sb6rlEJPxnxg-HIUEeBfqO08944p3qyxxgJreuuas-n3wmrec1UYKtmXGYunYxa96mpMi-aAJ8oK3lBrteMaEefCeVtYK6mCsfCBc86fPyjh~fXMq-ih26bTwe-tX8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_pl&type=PROGRAM&Expires=1484449197&Signature=QIvhVQD2B9BpbM6idwd2np6gjFjQa~nSMxkO5ImA5h7RvSSTVc5ixUKi4eiVIAk9m8L1D9dHJOehU8JracBKDhZ0udquqRd939RfBwr4k6wUjXpwSnRrS68EWA6vuq6YUpi457~q3oBJFH7kH6Kj2IQBp5C2G6VR1YaT4RdP68A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1459671313&Signature=CjVkptYv5FEW4QVkhZqNx9nd0kI1~julfRE0xYPmEr~QuwVx87J9FYQ1jPh0XTTMVgs5Zzt1jgCRnsCZ1JgQdIiEHdaDMGsJ8m1HNa08SIV4xj5NeK~e8CEob-MADQdUDFz6O~ToVZqwaVnoBY8EcN3coBHj-MElETuDrHPe6ao_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1479770009&Signature=Qi5C8-K3uO~XG8t5sjX1yb5N8l~IcknMJViN6HOBlXW4xe7wyfhVAs3GaayXHiYMqPxYVLcYR76tl0wE8TrKfKQoL00mDmPND9wGYRXjY3PheXqnNidd81B7HjvVqdaCi-SwznX-hamjN7fYKzzhEP1s2tt5RnI2gKdoHeyKXBQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1476974223&Signature=DzeoBM2YiCmjrpuEO~E4WfWvAG5-Fz7bhsgNjr1bZ12en-~AfW6elswtPRhFnJXsbzaNb6shvAzfDvL1LbQOT55vD1LmO37z34qAGjPt0IlilCs69LNn-HdHI1RZVJtOemXdunV2RA9MPuOZoWcBgAFs5PaWXMRXzdeDHeMW9oU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1466649333&Signature=W7D1nf9b5cp83dToiMB-1UUdtOlYCDak9Op0nPaAiC2ozQJxTnq~ztqkUxH5152HsCYGmwd6fg2WkBQYxdaWT-f0JiHNsxtD2S0ocD1nCUL1vS6xLOBfXljcJtvxUODsPCbWhon0YNTmYf1dguA4m6PIY~ROBwxfALRYUSLxcu0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1473758275&Signature=GmpN5d0JZyxFJz6VXCS4SPL06PhVxt7UBP8w7PSLhQbSLzcWWfV1M5WF-YVvET8yrobDdioejSadE~kMdddbhfA58lBNMpfVYeauFFpKeu9kCksxRumSKFYar5zBE4aIHf-zWLX3hKGA7uGEsETMx7Vt7Q5Jm0IaFR5jEJxaslY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1482043382&Signature=aXjt~tF~4L7FHeU7IskpPjLYKi1BwXcg7Z42zq291IqxGRZ13Um5CgJJ47kSvnyNQebVibgDMrP4xWVPcVE34Iu2BW4JGH0zhC-NCjT9MEz6-jbAoyfhX8M9QHMt-FpyqbLalE18WoHupPyBG0js18iZXikDxw07jMC8nvtyKT4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1461123447&Signature=FumBSIVwhq5Pwmh0nzi7YWTUGR6b07mM0xSGZuPP~s9PHByCRxgRRUi8zYCJ0863mTVEMg5xokYp0Qxc5gZtKLcl7kW8dwDNZDv6rcIDQh3wRlpVdWD1nnkPg0GxgQhWC3M1XHkFGz-xvzS8JmUd2PdtjEHJkMGk6XEycIt72lg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://w7.mien-phi.com/data/soft/2014/02/.../OneDriveSetup.exe

http://w1.mien-phi.com/data/soft/2014/02/.../OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1476917795&Signature=eZaC0GizwgHkGmr4XjHCFMlNIvlDWGHg9SMaz2oIvhAYJkwiN89Ng6qUUN3Qww4-U1mlJsWpcsASiICcfGtAaP8GLaodrr9CrAO9RJPctigfoUIE07x3MJA2bQvsc-Nuw0grASktWa5VF9v0Dr3KYh2zyVankANXq~9GYuz2~iQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1477886975&Signature=U5rFIVyTfHO6P2bXkzf2TvBimt4-aowMJ~lL3cgqU79oE~DiQJXVRgNCqGjzgGguHIcMuc-qaCZqR4CZN1MMe1DnsdeK60WCGs8ecDCw~yWLNuo6I6mLsYISuErEjEH6Y~dEscjBnSllmtUk~1kFzPLdKGcW-mB7dCMz2FRCllY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1462522225&Signature=Hpa5fciNrHoWrL5K4xxHXPzbZSAYTVQtizwk4KoER~bz89~663Pmk0~dbFwmDAO1eIVcf3c8zrOnWzciFrnKWer8SEzE7tgwjeJBp3B7pOFqclcjtDVAWrcjJ4YU8aSZJXDHX5zHfrcfFsj50hw-o09G3dDC5ljvgUYlRBQREh4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1461046500&Signature=VmH84v6dtLuz-SEuBkxA2x~K8RbYq8mV4XMbh33CIDS3xRJ1kSGBntdhoFPvaBztSa~ir-22RRcZtvBC-bsbO0~7J-aAsG473mGN1K6Lq2g99tKPn7BKf8zYcwjxdrvfiJ4TXY1V4rX6uusQG1v~qTHwo-X9kiIag1gJ-OGaW6Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1474157686&Signature=h8BBDtaWn4gauAeENsKOP-7p28mMfxruexWAs04svZ~tUnzhhKViwa5g-qobjgbNGE6qHazRdXdfX6Q~wcqjXUXZQ3bSxoQbE9ehqHHMLAQOKxeAdZeux8iIGd1-V7fZ2pzefklbk8gp10ulcR2d0MQc8DVJ8uNeIGem632UcPk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_it&type=PROGRAM&Expires=1481007886&Signature=HKGAj3dPS9qxlQ~BaxE3jHN2KSMhagFoWYIP45OYUZ94Yi3owdGwStrGdoFNhpcMJ-orXbitNvsW-DQ9kY-SvLTGURPgXJnjHwMuNpOgrqO3rLo80cJV4xSJzumTD0mgQfzIucNLyztHIrOcxqklk62OQKjumGbhtMJ5SEEoPcs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1479803094&Signature=JyQaN4ugSC6MlFElt0UHy-CiaEMViO-RCSKkxWvFshr7LAEiVnl~hNon5OAnZMXmn~HPT3tRjSrGyUT~gZV9Qhvx~P7Lp~kGDj6-aP80-0RmEg4OEd8XR4POZ1Org1KDGjgaSy~fssrF4a6zIRwPdenLyP2JhVYQ371B3Rx4quQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://go.microsoft.com/.../?LinkID=392253&clcid=0x816

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1445864749&Signature=M1rN-LHrp3Q96YVhQ1LSodYY1Frx3YEhq5KwugyFOZDzp5vv0jr9yyyIjwP0lByligpLgbJhMYQaT8TZmVEx3s7GhJD0qFj103LIC28QhoiayDtPj~96BKTrkB5kGQ-BTTAWvjCQQ4w7cvi8O7iOXpOW6ZrmZyc9AT0IWi9lmiQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1474704993&Signature=LAujx2BV8YTNRdMcb1WL4nxUolcD~-4NudDFZ2LNBXniKlweC0YkokrLuBMBR~fICziL96oVcbrEyFLUZY5YqG10GH7rQke4MbH48658W3pr1M-0ipFjHCSknb7VVMKnVqzs--ASQMH~Wxj~~~4DYuetVeRRTpFzZW-6L5wsmFw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://w1.getpedia.net/data/soft/2014/02/.../OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1477375009&Signature=fxK3eh3y1c9NVlf8M-fiYijNrQQMxwZ59EMJEuyv6rWxPaEBpa-F6kl3hrxCmFKMI93utqPB9k~c7ZynarXMYsV6g9PdiiApAq3OyEDNvEHXtQ5F0l6GUfLFlKDblTIqWPp3weDahSBLeo3SzjCaGt4BDFcU50MW7muhGIjDzFs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1476193691&Signature=QICo8Tp75P1rSRyqBeeF69OWSagrzi4dNS4kMKc3ZQFVaMYmlNr8p4pb0jMwL~rcL6~Lcbzh0Ye~WSq1fLBbH4uHZsjEkKa06ijLSc9P4BEkvzK-5gqnA3RxXJF1skT6mSObjgkWAW0gKlePnzsShV952b~3ZLh5haK3AjCLF4E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1460695967&Signature=Si8fymNuCy0P487JDh815cCnYsiuOVFVLwEF92Bt~MeP5HOycgPCvNNp-pmPD2XGmSwOwwKKXdaI6mfVo3LP-mUu2A9xX~nUK4p4jWhRObbXUZtq-CRDZtsrpvvlyCGZf0FSldbxxRC11KE~UTvWzKq8Yh1I5Hz04Qmrgey0fmI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1476106001&Signature=UzvFU74xKwdxwy2~dCs-Al4LJDQeJ52JAmhdFAHxVeDfEesIQnG~eJjf56silQgXVspVZSrj65BgXJzbkzqWqsjMmux2Lw4BCbQ~~rdSXtKdOTm5nqFqfVSKybiSJNe8Ems8pUuMbEN0jcQVIlFC-DsfqsnrCpuKvVGKhXY72zE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_fr&type=PROGRAM&Expires=1469316591&Signature=ZKNWWYm2aWNtQQ-Kr84pUJ9MUeaB3EoO0Mn5Y4X4IjLWmGJvinZI1CFqk2zQ9JR6B~lguJVqQhGTk0tONUWmUE487EJDy7v~UXhZ0CuwjKV~Gb4DfRFYXrplEFrVYXnXl4WYfgdJKI8cpd78lEPnWZHajZoJJaX7EzKKNgswhw0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1436355985&Signature=HXykZaf0bAiw9APoTJ2P4RXK9Q5GDi7NqXhd8exSVXOpEWDQKo7hkgbNdJI9qTK2HiV7BmKTRwy-iTPZfo9pUEK5PIDDwOHEd16NCuOukMZ~7HnrCBLA~k3ZUMCO15Xhco2c2ctf~Hg6hCm768vKAJPciEvil-Ts78Y5KFgnq-Y_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/d9f/0ed/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_es&type=PROGRAM&Expires=1472442767&Signature=NJ1-6C820rdvmBpoU1sOHFV14TzYmveOqJXqKQEIPFxOiLgF065XTjqpnEMCpZEVeMts02B6OwChf44ddcgZKA2N-dl8DQrWFY8UGkE0Le9K1gyeWtXTY8K~tQhOWF6wvyBS9xjLRvlVITx7Fu431hfrIFG7xqTPCypW0dGXYDM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

Latest 30 of 93 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.