home

SkyDriveSetup.exe

Windows Live

Microsoft Corporation

This is a setup and installation application. This is installed with Microsoft SkyDrive. The file has been seen being downloaded from www.mediafire.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Live

Description:
Microsoft SkyDrive Setup

Version:
16.4.6010.0727

MD5:
732fdc044713eb9e6c320b655fc49658

SHA-1:
1b53eeffa3caf532082be89acd32d66154df1a7b

SHA-256:
9c470d65ca4bf218d51f5f5892ff8c6eb5b74b0ebeaf97091221c614e190aec1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/19/2024 11:56:43 PM UTC  (a few moments ago)

File size:
5.3 MB (5,563,840 bytes)

Product version:
16.4.6010.0727

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SkyDriveSetup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\skydrivesetup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
10/10/2011 4:32:25 PM

Valid to:
1/10/2013 3:32:25 PM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
6119CC93000100000066

File PE Metadata
Compilation timestamp:
7/27/2012 7:11:09 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
98304:9872Wr89l8ZVWkjbrVVywi81NBKpmS9aWa7/+vEkWpwX8npbuFJ02wZPNwNrs:+7prI8CCbri814m607/+vE2X8pyFVwZ/

Entry address:
0x1964B

Entry point:
E8, 35, 34, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, E9, 7B, 38, 00, 00, CC, CC, CC, CC, CC, FF, 35, A8, DA, 48, 00, FF, 15, 30, 12, 40, 00, 85, C0, 74, 02, FF, D0, 6A, 19, E8, 96, 2B, 00, 00, 6A, 01, 6A, 00, E8, 91, 38, 00, 00, 83, C4, 0C, E9, AD, 38, 00, 00, CC, CC, CC, CC, CC, 55, 8B, EC, 83, EC, 10, EB, 0D, FF, 75, 08, E8, 5F, 3B, 00, 00, 59, 85, C0, 74, 0F, FF, 75, 08, E8, BB, 3A, 00, 00, 59, 85, C0, 74, E6, C9, C3, 6A, 01, 8D, 45, FC, 50, 8D, 4D, F0, C7, 45, FC, 94, 1A, 40, 00, E8, 9F, 21, 00...
 
[+]

Entropy:
7.8694  (probably packed)

Code size:
544 KB (557,056 bytes)

The file SkyDriveSetup.exe has been discovered within the following program.

Microsoft SkyDrive  by Microsoft Corporation
SkyDrive is a file hosting service that allows users to upload and sync files to a cloud storage and then access them from a Web browser or their local device.
www.microsoft.com
6% remove it
 
Powered by Should I Remove It?

The file SkyDriveSetup.exe has been seen being distributed by the following 2 URLs.

http://www.mediafire.com/download/.../SkyDriveSetup.exe

http://wl.dlservice.microsoft.com/download/3/E/C/.../SkyDriveSetup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.