home

OneDriveSetup.exe

Windows Live

Microsoft Corporation

This is a self-extracting archive and installer. This is the uninstaller utility registered in the Windows Control Panel for the program Microsoft OneDrive by Microsoft Corporation. This is installed with Microsoft OneDrive. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Live

Description:
Microsoft OneDrive Setup

Version:
17.0.4035.0328

MD5:
b18ff6f1680e0b2e2f2a63ad2f335aa7

SHA-1:
deafc2778dc6b28a59676e325ff57da761f32bcf

SHA-256:
785a4222beda2e2ae35e579ee27af0944d53fc111e2dd0c364e58628b1cb3519

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 10:08:48 PM UTC  (today)

File size:
5.8 MB (6,081,224 bytes)

Product version:
17.0.4035.0328

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
OneDriveSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\onedrivesetup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
1/24/2013 4:33:39 PM

Valid to:
4/24/2014 5:33:39 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
33000000B011AF0A8BD03B9FDD0001000000B0

File PE Metadata
Compilation timestamp:
3/28/2014 3:39:36 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
98304:PSA56742/ZtqirJ+2+fe6x1BtyuWIvAEzNMBFu3KlxKH0KHtd1NZSWJz:P7crKm+2se6x1Gu3vAEzW/MBHVtdL

Entry address:
0x50DB8

Entry point:
E8, 72, 32, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, 3B, 0D, F0, C0, 48, 00, 75, 02, F3, C3, E9, 83, 37, 00, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, 9C, 13, 49, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, F0, C4, 48, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA...
 
[+]

Entropy:
7.8194  (probably packed)

Code size:
552.5 KB (565,760 bytes)

Program Uninstaller
Program name:
Microsoft OneDrive

Display publisher:
Microsoft Corporation

Display version:
17.0.4035.0328

Uninstall string:
C:\users\{user}\appdata\local\microsoft\skydrive\17.0.4035.0328\onedrivesetup.exe \uninstall


The file OneDriveSetup.exe has been discovered within the following programs.

Microsoft OneDrive  by Microsoft Corporation
OneDrive is a file hosting service that allows users to upload and sync files to a cloud storage and then access them from a Web browser or their local device.
onedrive.live.com/about/en-us
6% remove it
 
Powered by Should I Remove It?

The file OneDriveSetup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1486014741&Signature=fuz~~lPJcimZ~8mVENCXBZzo2K7qpA4LTa3A-zCD8OWs7LAbsodSYA8Ojac5hLFN62CEiDP-hwbCX4wg1MonfbEUfQtcnLc6cBRhmaH7GJJ-xc76XJFY0v-2m9y1KMlrCOs4fnod9folaXzamUE4a~MUf~HfJQ1DPr2qRxOf3TQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1485270950&Signature=TmcIrM~d4XQv6RsKkrC4PYEkJiQPRFTl4X04yRIWji8ea7434oxj1Fe72TdLTpMU5w1dO8pj5NvT5Pn3MAKYtDSHkUzOwJuXDimp3FQpwpW8ZCwRIWbtERZeKVPea66koJY4MYpNpdBvwoWkwZSNchKmY6zdZpuuH0i4k1X3lIk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1462693177&Signature=LYfXHXgXDTdZ~lKRe4zfYgEHrv4eBpWmiewM31d8bfuszOZcXI-T0LQkisSd1AR4o9zfYfzgEBO2o95rVnfhbYdgP31z6K9v9k~UZPnES1NRoaKpR2IVlYQE~0l20JODOXO3n7YORxRS~qQCPWyOon7FfWM9zDxdK6CmJTSkZoI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://ec.ccm2.net/ccm.net/download/.../OneDriveSetup-1.0.exe

https://microsoft-skydrive.softonic.com.br/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOUaTmPcnTkxaB5ZXgCkOA8QY7PyY3 uUAtL1feCAyvHnwoUVWit3tzAYOJsUFGArlW7h3qRD4 nTsZz4Tb8cA5z5e/hwrAqyBSxp67uzLrrLTNDDqokjhMJszIBLfu/kpuVefL hzZG BPXgpl1sZ/pbMy 9RZJIh8k9fa//JXoiGn2wOeWjXfFCmP0cP4JOpxP3ZvyPnEXtDouAG9Fm8J

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1486784266&Signature=OHWo-WQOWwxnad0szNaA9BYgad183l5XZ3OoaN~pduNffy5Fjsz-l5qLz~pGASFbLCOiMjXg~LOY9Xtg18gWV~xZ41q6aKgi5EtENVfw9s4KsDSARfvOm6k~t3bU3~wL~g8IyiIuoOaj0EY7DMqWYhKQBXeqwD7M7qwPsW2hk8U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://microsoft-onedrive.it.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOUaTmPcnTkxaB5ZXgCkOA8QY7PyY3 uUAtL1feCAyvHnwoUVWit3tzAYOJsUFGArlW7h3qRD4 nTsZz4Tb8cA5z5e/hwrAqyBSxp67uzLrrLTNDDqokjhMJszIBLfu/kpuVefL hzZG BPXgpl1sZ/pbMy 9RZJIh8k9fa//JXoiGn2wOeWjXfFCmP0cP4JOpxP3ZvyPnEXtDouAG9Fm8J

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1485190855&Signature=fclgZXU-gXUwum6JfvQ7GEzBzdDtx5crWa2HcLT-Osv6Md7QZmKPCBxB~xHl5Ku9zjUG1TFbBTt9xrrlinuM3f1YTnm6FsSQY2glb6m950IBz~mzWFebJZabXRllPrjis9KsWNcCo4E~zvNUvVAF4vU-DpURovCR9lSirJNv0sA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://go.microsoft.com/.../?LinkID=392253&clcid=0x40c

https://microsoft-onedrive.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWsaqzcx5qWc38cQl6Rou f Ub6yb6tnFoTCEH0eacxWb57jJDmbx21slxjd 5YS5D5astBdJuPbU U2OoMh ExRJRpmBlNEZ6YaNkVLmB2O04O az/BdFOmwtZ//kzYKV9 uWu AU0oP1L5NbPrG0K4686rzS7fDhRcBS/.../iRyEhp

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_br&type=PROGRAM&Expires=1481797060&Signature=ic-0T8oax2Hx~m5TJBUudv0JRy9QBpfAMkK8-9yp6kkOepCUvLTldomCreSAdJ9E7UxmWWuFdX0bmY02EzdEVl4boRggxqP7jhWTGxNiLePv7uHOl7cMUAmHGCJjJ42FM160P1~QB~loiLHRT0i0fbg2-0dOd5o2S-Q~sTaLBAQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_br&type=PROGRAM&Expires=1476444305&Signature=J5iRW1Kx88eV0UD-u1d-zXiBpVt8VXlqe8igcIOaAUs8tCfConPn2W7cxhZ3ePUzQOFlIKTfMf1MOvkaE8PZs-rGk6XZtiwJXyktra6cXQOxEY~VX1pg0oeIaHBs0fn1bPUJ1cjMVmzVsOuc7HdcA5IW4Y8FiIO~s9qXkrPeVRE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1444490894&Signature=e0o2bZ-k0oSpL0lgsxVsZJf4JUsu6vtWX--tvs6wvUBmC4rAInjZ7rqSTnks3-o3~sYUSaTz11JgNoXYTBjf62cpj~aY54eGQUg8isIoIpx62fhACifWDyz1EErDgUOOyFY7O8LJJJ0Gzj6S2TUAKOf20Ci~TWPP1Dz1n9IHtf0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1475849511&Signature=d93fdHHEON1HehCiwl1YcTPcjMz5z85ezI4iSC49HHico2Wd9~t~f~nUx6UFmIVuJz4hWJofYYzbfqyejQvNnRODz4XKkTXrd0ZW6gDCJnTqvywBPF7eKNeF19fUDJntV0a~tGliWx8Hq3TpptT6fNidMzQiP~uIn3GfXt~lTmM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1465794228&Signature=G4fStyjfCwc9GyZXzH1L7AsAow1vzJP2kqLjvbgFiEzlqyVp1f3t0KGOY~nRb3VzwNgzjLGISKp9mOg1mvG88QCI8sSbaD3g6wyeEVdYTDj~5662JELsHfqUbrKT3J8IFgrRzVIDT94-LOIPHRF4dDMqjuqdRINsYwdJ8UbbApI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1445674288&Signature=fHCJmFmbPKwC2GLjINn8ZXvWwenZuVVnaXhBH7M8T5nIXZgNBZ6j0Yn5AHsUIxD-mb7txRh~bYDJzOvg9MrGXpyDEL7w7KOBq48rfZeQVV94uOU~XUAtmG1DjpK~OuY9qWTurc2cPh0x1SBjIhVeWwL~jgel~8uB2J0QZGqxG~A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1470074961&Signature=eaxS1v3QSw8HelQ4VHYlFr7tInIYPRjmjsolVJwdcLBgVfrgc6GUoUNBfW9VYFW1rMdBF~8zuK6Oqsmtp4Aa7LU~XtNT-oY08jbMbakPWzzuQLwkq6HwDAOgqLLTyd2q6G2sn7y~l5mlbRhDIOd8~zAtpr7U5iihr-g7bkNL7vs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1476941081&Signature=QycUDY2zI1~viQnXB79qZE6HvJKEQQXXIgRyY5wQFIXLKfCKDiw-dZZDodu-EeXKpddh6iLJjjeFA9-rQvv4clkWApoa6DmEFtxF-USGM4OTg~99gMFt4okqu9HjxHsVXEVmIDpCL5zSG9I3uT5IuuJyRSladVRYadFKUdtOZvA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_br&type=PROGRAM&Expires=1476531916&Signature=ZoB71Oj7Vor41ntS1t2pHJEN~I9PmLiIH9~z5hJZD3dBRUcrmYNTx2spJgI8GD0E~qcEGXfYFaGQUDPBASgBiIQz0Q08jmZp2BcutLdM3VpWKwA1p-u72HWmngezYJCcc8eO~81b4D05GLvTIrNVvBcwbPwPbpjJ6eeMX7FDRAA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1468671534&Signature=OeJ3i3yRAhGIt1K7gh4tE7a992YhC~DMxaClbz8kJncSrKKCudvvZGHd7TZaYTuEOmQZ5~wbnH~MzP6U3vxu6tGkoQp-NwCv6DwRacqMF0ynS9jXbpvM8qI7ecYu7anQbYI~iSY2Srkxtx3~C5YKlb-RMn3U8OUqQuJGoo51OGQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_br&type=PROGRAM&Expires=1476143622&Signature=YnVYJkhlQU1WSKskJU-8BxUwtut1dDUZ~QH2PGQ1FdCId1AxlbTpGiTFYex2tfK3a92QdC81prcxAL-t-iSLlJwI2q4cuehUCW~c62faxSWlpJ4LzDa8iqB6Lq5hhB4Yg3h4zr8AR6vhDIjSaNpTVNQ27W0pqLF4efBHm~D1rlk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://go.microsoft.com/.../?LinkID=392253&clcid=0xc0a

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1453086990&Signature=LkLqlzZ0xVq6Q9LUdPjyweYUXmobz5OKvfQzVGGDGQLfYbclQDSA6B02J0hK7wuIrucfqoZQui6mCyhOK9023xLaVKmtRHZQeehkUQeVsc8BVNlcvx0YWpyl6iaSEsSxNR1jrRJFcXdVrN1cSHqZujZe9EybOfKIIeftzpHk5M0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1468452865&Signature=OwGJEa4liztcUQ9OPizhBqL1NU-H8vjfWFlrANmmtnZiiWWkNOuSfanRlcZfxa0FaurVPyt5FKnxHlTMDCeFf1DUFtMDCsUR~96gHEkPWeyBAobIz6gyeeeOvX-Ze~9ek9Bm0ZU8MVJp-~BGVduI3x5NqV5nST1Sx5h~vQuUllk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1476736050&Signature=Pw3k4jKT1LaS5OO7o9zzBiyEBwMioxbKtcS4VWIrHF0PTmi~yXoKA-HHQlG95IoMlO7-2aZA1MvCYQb6iScva6V~~kOKqqtFqafai4C-ra5nAqpNNXghaQOLKDQ6LyKrujDLtNTK7ttaHXY~ZWnw-j8L8~GnYgXonEPS0bX7EIk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1476386453&Signature=BNL6Drgy4-dCtqm850N9qsDOw9yLoJHbnI~HN1jrvbPj~lrf1zMXPhmCKBKycsA~SlbMN8t-62r0KOan6fo09bvWnvruus7mziE22WjetY9VS6CfjUqOUq72SfHBF10ztl2u5hOlYvE-hYFepFQdIPhT8KcV6c7fOHaFU~fTWZs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1478427952&Signature=MUUrDcwpFvIBUgtU9ybRV86uZiL92gCm8mlOUV7MlgXSA-rlhox15XNdz4CKnRzgb67SaZK57a~ztBMyL3KDRJdDvz7KPzx68pkEIyxaIH0AGugePm5ESyWge0YBmjKS90p4AiqA22uqAPAtoJzfu7uvMVu7GEH17WemwJJaadw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_en&type=PROGRAM&Expires=1468203996&Signature=KzhRxaNySgaw4jAW7C7leQzp1vdhLLqIJa2~RHQVrR8-jJQmRJ7OUg85CrpTwayIse2hHMQ9P727T4iTHB0~8drZ6MkpX2kwdi-YhpRk1Pfp-TTxDIEJmlXlxq7lAbiR7HOk9L2CWRUBL2N~DLW1odzfuQ6-ipIUj7cZgo~X~5Q_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

https://microsoft-onedrive.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOUaTmPcnTkxaB5ZXgCkOA8QY7PyY3 uUAtL1feCAyvHnwoUVWit3tzAYOJsUFGArlW7h3qRD4 nTsZz4Tb8cA5z5e/hwrAqyBSxp67uzLrrLTNDDqokjhMJszIBLfu/kpuVefL hzZG BPXgpl1sZ/pbMy 9RZJIh8k9fa//JXoiGn2wOeWjXfFCmP0cP4JOpxP3ZvyPnEXtDouAG9Fm8J

http://gsf-cf.softonic.com/dea/fc2/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342361&instance=softonic_br&type=PROGRAM&Expires=1473061761&Signature=h8LtRLVslw4T99ZHvh1cklPJwtca5vedQumFrXfnbzXWBsw2ae0b4Am3mKEJixR8m4IpFTgaeh9wgRuiXC4KYfmdy5I4DVzktNJDyrHWRUIQqnZBYVFpHXmcI3RyS9wmqvXQsezJTi07oQBQvvtn~nL1O6~ml9I3fOmFZpdiKOo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OneDriveSetup.exe

Latest 30 of 94 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.