home

onlive_setup.exe

OnLive, Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
OnLive  (signed by OnLive, Inc.)

Product:
OnLive

Version:
1.1.0.100581

MD5:
bfb9cd65c8e91008cae03d1a40264f85

SHA-1:
e664767202678fb52e3f2e6eff75a694b7863318

SHA-256:
cb154a89c9af2b23918306dfae2a2bab8379434703fd03e2d50bb927c237354e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 6:42:15 PM UTC  (today)

File size:
1.1 MB (1,188,360 bytes)

Copyright:
Copyright © 2009-2012 OnLive, Inc.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\onlive_setup.exe

Digital Signature
Signed by:
OnLive, Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/18/2011 11:56:25 PM

Valid to:
3/18/2014 11:56:25 PM

Subject:
E=ssladmin@onlive.com, CN="OnLive, Inc.", OU=IT, O="OnLive, Inc.", L=Palo Alto, S=CA, C=US

Issuer:
CN=GlobalSign ObjectSign CA, OU=ObjectSign CA, O=GlobalSign nv-sa, C=BE

Serial number:
0100000000012ECB05E74C

File PE Metadata
Compilation timestamp:
12/6/2009 12:53:18 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:uyJEkXGr1DKJHPsKZR60kTlMqGPQyab0LzYjxtBGEYu6zM:uyJEkXGr1aEKDj0MqGP/abjxtBpYu

Entry address:
0x36A0

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 88, A7, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 53, FF, 15, 88, 82, 40, 00, 6A, 08, A3, B8, 63, 42, 00, E8, EE, 2E, 00, 00, A3, 04, 63, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, B0, 0C, 42, 00, FF, 15, 58, 81, 40, 00, 68, 10, A8, 40, 00, 68, 00, 5B, 42, 00, E8, F4, 29, 00, 00, FF, 15, B0, 80, 40, 00, BF, 00, C0, 42, 00, 50, 57, E8, E2, 29, 00, 00...
 
[+]

Entropy:
7.3661

Packer / compiler:
Nullsoft install system v2.x

Code size:
24.5 KB (25,088 bytes)

The file onlive_setup.exe has been seen being distributed by the following 50 URLs.

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1478750899&Signature=T40rS~WF8HJr2vohcJgh0gMlV88Ey6dcIcSFHMuaQDleBgWU7TJplzlDuoGC9BoaABAoGNEWjznlSRY~Paw3hvkhOrrY7HsBKK4f3cjLJwF8-mPA-Lvevgl2ZZMUdh5OroVfPSbzF7~5hNWfnz98UtQt3oJ9r9kTvy7g7c2mzhE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1474082093&Signature=VqZnaaYgBfbxvvALwY6-sM-VwR~MEEqj1pwUcwi8UhztoAa8tD6DFf34f3J5~KokeS31pBIAVvJUwVoHLp3pw9tn-p5ZtL-q03vEOXnFgxQtMgC1wxVEvnqljCm12YiOq6~2AAjyLf3UvvJZdFJsMUAIKbl5VHkZ0V2JoPVFyDU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1462505089&Signature=W3~hEBqbYqIi9mgum43zovk9FjFRJuizHkRhYQXsyS9CBRKIfez-eIU9HX1h9biL~wLF19xKbv4ahpGjrgKuvLoK3RcI54EzvM20u6UeB-UV9omzuQ3ioRa~HoHD5d2soNRnrICYnPAHMW81qjg6s3h7mVgpvf5Ds-t7Y1nVXEw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1487727194&Signature=GeRYZBDVaibx7w93COVdPCycqou7ap6rbFhmIe-YlB5EkDDi8iYch2LK8ZnQk-Up3ByFo4548hk176gUeIIHnoD2eYqrOtzSJz2b9cQ3nRzkBehG8hF9xUm1UOtXYoyO1y9-lqJmm3Leqn2ImvrKdqNRGJNhkyrPGwSE8gacrbQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1477663759&Signature=AdZGIzBaiKjrM6NyvDNULn5AzikrBTypnpGd-9WcFfqzbJl35Yc2lF1knVHbitNiui6HWMdy3BuRPYzhrA1gUOtaJgAvK84KeroLRvgVVNJXMjLVvqZrsV6kesehFef0fgMuyBJBdC24ZKlxtpVQkiFvujiD2zE3pKhmCJrIe6A_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1437085218&Signature=PLGJD6J7uPlMcvmdaogXjNbrMyK8QaAK-lbHeWS1BwhlD7dincKBr59xLlSIk8S6cPS3BdfGhAe4J2aj3SWkhErCSg9iPLxTPrwvLlKuG7nax1xjT8McRhHhnujzbYyRppy6TPYZCpIx01AqzqZrDc1Mu9RvXpNYG2fMN-uLS-c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1475546039&Signature=HxJqpkrQKJIn9LqkHQufvI0RSCjLmKO5Fum8A~bfHqEcQ3euusFT8eprJjCTAXn~qu1yxnPvmOxVV3QcOOMYObopZG-nPEwBgMniCaGf7tpMXW5Ds9yG5HrL~zUUayjhBvs4TgH5iEejE8Br~C8RlpNgFz7hq2dhaSlGvLvjTl8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1464236749&Signature=XVl6JbU4bXOplsfoXJt0eBYYBMYjzb5ohEZKB0QaX-GPBvAew0M2tj9aTOCk3I5lysD3o46ffRH2urK9ecSY4e9GOu9hYB2XTDsnwXgZYA--JKD0ozVQHMGa5a20KtmkOQXsc1E2dO4oYBuPapYl4ikuHqDDgLa-G~C2ypHxQpw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1484038931&Signature=ImXnfAxojTl9aUiRWvfR2L3Pbs6wLzyMhy98u3rWo99zVk3nu0NE7NJ48MgWpbP-TKy-JZLS2bZmBkX~OOArjj7Ahv7unQPpLhDmuDxurh~cLum3wd8L~WxxJra6PCKSrH-Uns18iiRzrGF7fpUskPOsRS~f70axMmDNPfYrHAY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1474079202&Signature=FPzZAy5~6QnBsT-5WLvSHvFRTmaKfxKlX1Ihtkb9aOEiizFDsUuBs-zFAQdUx1Tr8ci3B3Cba3-HXK08VC3lvGV0PX64SAgKsxFi6azBG~OKxCPC7-6DbrD88OvTwa4hQ5mE~RrhJHO6EM0XjcLEQ3P3VxNy-5x899zs7XdM1q0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1433808757&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=AjCTcrNdY~5tLzJ5UVcAyYilH~qL-tb479eqmETHkGZyM1bjxAA34hEKqa~823ga~yN8baRW7lRaQ0v74MyhEzhEQnh9wShS8ATDRAoTrJvu-vd2VDBVXsyBHAe8Ppq5kcHQTGGfyMsrfSUJ7g6QQ5LW1w~YE0CmMzWSWU0q8x0_&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1474174221&Signature=cXEKx452S16cwnl79xbHsHJ-M9byskJIIgR8-BEVNxpIEg1jHjDHiAgXM-tWWOgHk28icRH0ZG3lwWtuNQJq2NkUssV0WqfKsEu7BnKVIMj5zxF8MXAUl~BIdEwAUHcBXG0JCKqIsgoVDyVHhtIsNBA6l0jXepcYTxcOZFHI9QM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1447052862&Signature=e~Ewo9CiKQWKbtCW1dNwF3fhZlFr4gFH124yIbc~cHhgl5WtgV9dRM2aRsD56w5-DNaIvINSuaie~x~SO56tui-B6n4v1j35Dr5CmKfS9J5a~MWEvCqsX65J2sb14op9SQiQJ0us0j31PwZGFtWKrAWkZv6bNKONYMOY4xva~6s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1448754178&Signature=i0EJv7dfg1fMxxpDQJ~gGndjxKKrt6CsuWd-PSKPdhkfByGlJKVb9K8sZ8Ggy9LLhd9GXNqEb2-uhfoyDGt4FvvMmF9sq7G-TOFPIlawjUpbywVJgpRNHf1WHqyYcP9ZnMfoDYMBDPWy1jxNRnfa2UMRsks8m8yIoViISxXHnWk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1477802809&Signature=f9NpqWJDCftIMOQ5rWxYoBeLrz-eb0xymiBsBRPkjnoy0-heKkLKdLk~Y0lwOYveuF8VKrQ7sXOtMGTvsqaxUbSK~jKGf5uxU51szxxroF5fjTIjssnFPMHOPr3ZlLCo08Ae3YaF7nt7KQo1NPxcM60lDySB10pXiOkEnXE6Pik_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1476062988&Signature=DfHNDO2yDld2fJaX3anxV-Wr~1G0ZuDmQNnUTKAu1DeASbep6bDRbhsFA-fxIFo1g3c6SgbHsib2f5yPNf2vkP3nxnklC3F49l5hDkgb7022HQB~FR78rOKnTvtVBYQvRY-p~Q-dhEUWTsxWS76tCYXVC3yBOitTlXcd6KvCCDM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1476585416&Signature=RRWJNXWZWVxH-fBC~YD8MuXNOdtogL5wjjJq-T-reE316q-1okh0ufSCy2JKosQxzfy~WrzeNQ-Rwj2EUq4X43O87HzlrMlI-3jcYIAde1nsSoQ4K8sEqhdWGkWVvO~f14OrO9rSrG2oNUibkdj3Isf41H3zFymHrT-ZMb4vm~8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1474747028&Signature=OE7u9X2ykMHSRNeibwtDKkvVWio3SvMi5VDjV-ftKL7~iwqAIArWwrv96gZOzElA23xP9sWxMEbhgk260NLQHpA5ZIBXYYGmvqHo9HxQTUSTQ0gAbTYTYxYkdE3iH04JYYy0pURqQYR7VEwEZNUQgRd9GRr356KNUuQ48Ze-RMM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1477717818&Signature=Qtm5Jz4D5jJrNaxOjForJYkTGCjNGVd12lFQRUgmctlB62PS9RIwyhEjpurMUnbNPLZPH8OmGQzlWGsfBb~u6xAP~yjR9FAa4NdbvSHnNVE113xf9kRXpN~lZJZzd7HVTY6rB1bvD-WjalPfFzQQTN-nHH5bri9Hpb6qlZR20yo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1441946129&Signature=FetP1iOhnYBSGABI0QDK0t6OSJpDFgI2-RxomRKpSEoM-XxpJzyqees6m-aSJ-RjnbDrHQ1PkIFaCL-yGHvO7R4h-duMWMDS5SyTee9GOI7cmfRzct1RhWBhiPlzOoltgl76wrL9p92SH0qOvSW5UQ5Ihhosr4BIhsr22~IR5M8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1438251631&Signature=RSJygM4YNe0shCag~mu2RCN1qC8uiRLB3pIkEGX2knUKStqAuKP0iwdIiGgwh7-rtFUv8wbrno3gEct4DDWYJ1Yq7Ou~KxRdTH~HnPjfNp2NwSUBP5nBwiSqerVD4VXLoddylxJnTFS2g-XYoTWMg90fCq0DKF7X~CZHRjH66P4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1466720597&Signature=AlsWALHcxaHDDFUL5Mf4zlq0AUXXElkG7IRytP63nE~rcR6WchmcfM38MPm069y7Qztp31dMvyyAxV1e-9cRB9Hapn03hRfNgI0Wpp6wQunT2vNvt7xK2GPFBMt9uj~IZtxlkbrTpM1FbX-IOJMiDGKk9eyxBgogemqJqnHpcck_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1478750434&Signature=Pdcm-7Ybii9DpWWyVAwm4PGqvffFGYThhlE4zQ~WNy0aVUuaOKuMo~QWnFhuldDcwnWVEU92tbVugH8vhRCoasnChyJ0iRVir2KV2kkkAEK4rbpv6qXF9ewxGGHYdddNcPEv5coAz5EnOXpdZd4xQrdbCO63C54kb8pWRhUDopg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1479867077&Signature=JP-ix~akNCwwE-UunyERDTlfanv66ncb1h1cxXpUYq5GH-4e1mpvqt0KJx5F1MbFRkkqrQB91bG~bi~f8AvueC2xZ5lQ~z5XnSI6hdvoCT3UtiSbADFeItP-5NAaORmmH9Szh563YpMLdJljIxjF6QOIBYUCWL5Zn-7CF9zXOgc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1478655657&Signature=KE145ln0BrEG~ESyjK0~N0pkYCqPfZgsq4gxiKq7DTaf9cGCxfCFMxr3YscI44KFOo5ei29Ml0P3slbQs5vfVUQEdlKw7KU6Vo-GFCrK2Ee6LU5A7CdOvTuV1BhyzzPwzk-vtrFVB6STmtJh~1o6wrbjMbXBe2RQJ4xG8hiNro0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1430961484&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XBc7hd-PJEHBPP-Mgl-lWdnWlCoPhWXNtF58Gqa3yFPlOV~zJwiuibA3fmvWP-37jMSzYOQgl~dhCaVD71dggZkje5MffK0EcFMlcQaQH2OhePjENdizwXsW0HSgMx3nQXpOHoQuQAczWKoYrC-Hs5nHS2K0Q3vniEcFoPKxYy0_&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1448924391&Signature=CqTvsmPscWVBWSZiwcDcw4dx6AJInRRpfm26ft63M782xb3x6UdiMTYXy61gRLRuExkRPmrDa6ZDxndOM4ekdzv73UKz8YOxCaVn7e4pN8cgCLUleq2G19HcPILCBIoUjhBatfo4ljwjq8zW3XfeI~JwtufQZWPwxHFCu6KPFnQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1482246118&Signature=gJtcCbnC1-86zSMjgRuyx-6w~ZJcwYdlLzBVxTwVWYSKNIloo6PEaz9VTFDq2~RHiqXG7W4p2K15N52tWgCIZgT-3ru2ZUnwQMelWMMcG1BbLE6KaTbDhrraBCI7pp-sh1VS2oWSC7~NchBqz3PRSeh8dV578LssHn5rJfpG91I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1483646564&Signature=GdjwSzXl7yue2-GtC6K7vkcinJGO9j0eIwnkPahA0r-W6U76yzDBzVsP99JKinnqUOO2GumXfZ-2sJOPVnwMCDMSUC9TNMHnDlbg98RRn~thX3EsFOEPLDHRefAGs1PrvJgBcOQjoCZVcBXXFqpWSzO86gAdSwrzamFzDDg1LmU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

http://gsf-cf.softonic.com/e66/476/.../file?SD_used=0&channel=WEB&fdh=no&id_file=304924&instance=softonic_en&type=PROGRAM&Expires=1443921891&Signature=GNNV1xP3Yh3lVS7d4TQ3yI6tC2S0oJtGKOMloof-LD0NCTW-LRTcD5ZlVGt1tIigttQHykWjRNL0hedhyZ5B8LhfhIcCCjTCaSQa6nhpTK3859Dpv2tzguMmvSUVXMHpsMkHb0fJZBN2K5IoO2HafTjP4sZWaKG37TCvNPmCuTQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OnLive_Setup.exe

Latest 30 of 224 download URLs

Scan onlive_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.