home

SkyDriveSetup.exe

Windows Live

Microsoft Corporation

This is a setup and installation application. This is the uninstaller utility registered in the Windows Control Panel for the program Microsoft SkyDrive by Microsoft Corporation. This is installed with Microsoft SkyDrive. The file has been seen being downloaded from www.facebook.com and multiple other hosts.
Publisher:
Microsoft Corporation  (signed and verified)

Product:
Windows Live

Description:
Microsoft SkyDrive Setup

Version:
16.4.6013.0910

MD5:
dedd078a9893af42cd624977dadf308a

SHA-1:
47cd5975945adb94139b27848239a51ab1e0bc29

SHA-256:
5b6d96542a81a9122246d777ed0abedbfa793183bec5328e19fa4ea3be07c7e5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)
Whitelisted  (by digital signature)

Analysis date:
4/25/2024 11:47:38 PM UTC  (a few moments ago)

File size:
5.4 MB (5,659,096 bytes)

Product version:
16.4.6013.0910

Copyright:
© Microsoft Corporation. All rights reserved.

Original file name:
SkyDriveSetup.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\microsoft skydrive\skydrivesetup.exe

Digital Signature
Signed by:
Microsoft Corporation

Authority:
Microsoft Corporation

Valid from:
7/27/2012 4:50:41 AM

Valid to:
10/27/2013 4:50:41 AM

Subject:
CN=Microsoft Corporation, OU=MOPR, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=Microsoft Code Signing PCA, O=Microsoft Corporation, L=Redmond, S=Washington, C=US

Serial number:
3300000088590E3C511FE26A67000100000088

File PE Metadata
Compilation timestamp:
9/11/2012 2:29:55 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
98304:aSK0JQMQ/rdimbZDT6aAg4IeAtczD0d3u/4kxA3mcGMQygsf/ocrd:DlQXhHt14IeAM+3u/XxAJZhFrd

Entry address:
0x1968B

Entry point:
E8, 35, 34, 00, 00, E9, 81, FE, FF, FF, CC, CC, CC, CC, CC, E9, 7B, 38, 00, 00, CC, CC, CC, CC, CC, FF, 35, A8, DA, 48, 00, FF, 15, 30, 12, 40, 00, 85, C0, 74, 02, FF, D0, 6A, 19, E8, 96, 2B, 00, 00, 6A, 01, 6A, 00, E8, 91, 38, 00, 00, 83, C4, 0C, E9, AD, 38, 00, 00, CC, CC, CC, CC, CC, 55, 8B, EC, 83, EC, 10, EB, 0D, FF, 75, 08, E8, 5F, 3B, 00, 00, 59, 85, C0, 74, 0F, FF, 75, 08, E8, BB, 3A, 00, 00, 59, 85, C0, 74, E6, C9, C3, 6A, 01, 8D, 45, FC, 50, 8D, 4D, F0, C7, 45, FC, 94, 1A, 40, 00, E8, 9F, 21, 00...
 
[+]

Entropy:
7.8475  (probably packed)

Code size:
544 KB (557,056 bytes)

Program Uninstaller
Program name:
Microsoft SkyDrive

Display publisher:
Microsoft Corporation

Display version:
16.4.6013.0910

Uninstall string:
C:\users\{user}\appdata\local\microsoft\skydrive\16.4.6013.0910\skydrivesetup.exe \uninstall


The file SkyDriveSetup.exe has been discovered within the following program.

Microsoft SkyDrive  by Microsoft Corporation
SkyDrive is a file hosting service that allows users to upload and sync files to a cloud storage and then access them from a Web browser or their local device.
www.microsoft.com
6% remove it
 
Powered by Should I Remove It?

The file SkyDriveSetup.exe has been seen being distributed by the following 3 URLs.

https://www.facebook.com/photo.php?fbid=607446732654302&set=a.102092669856380.2634.100001669416705&type=1&theater

http://wl.dlservice.microsoft.com/download/3/E/C/.../SkyDriveSetup.exe

http://wl.dlservice.microsoft.com/download/D/7/2/.../SkyDriveSetup.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.