home

onlive.exe

OnLive Standalone Client for Windows

OL2, Inc.

It runs as a scheduled task under the Windows Task Scheduler.
Publisher:
OnLive, Inc.  (signed by OL2, Inc.)

Product:
OnLive Standalone Client for Windows

Description:
OnLive Standalone Windows Client 1.0.7.631.128722

Version:
1.0.7.631.128722

MD5:
75cb2d728ef2a2e2982ddcbf058aec88

SHA-1:
b75551d067b45110addf535921d9e9a86ab5510b

SHA-256:
c01bb4faedab36268114d7f4f0f45b79bbc2ff14af6c0eb1207c64cb2c97ec7f

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 1:48:10 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PC-Guard
7.1.1

File size:
5.8 MB (6,099,568 bytes)

Product version:
1.0.7.631.128722

Copyright:
Copyright © 2009-2014 OnLive, Inc.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\onlive\onlive.exe

Digital Signature
Signed by:
OL2, Inc.

Authority:
GlobalSign nv-sa

Valid from:
3/17/2014 7:56:27 PM

Valid to:
3/17/2017 7:56:27 PM

Subject:
E=ssladmin@onlive.com, CN="OL2, Inc.", O="OL2, Inc.", L=Mountain View, S=California, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112127BDFA432EC1E594BDEFD6A01EBE32A7

File PE Metadata
Compilation timestamp:
9/17/2014 1:10:23 AM

OS version:
4.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:HL2qxKE2/Eg4/c3lESqWA0LbbBtQ6wUnHqSK0RmrS4TyjIqoTgpzQghjuTE:HVaELrSqeBrwUHqSh8rS4YYGQgEA

Entry address:
0x5D9400

Entry point:
FC, 55, 50, E8, 00, 00, 00, 00, 5D, 60, E8, 03, 00, 00, 00, 83, EB, 0E, EB, 01, 0C, 58, EB, 01, 35, 40, EB, 01, 36, FF, E0, 0B, 61, B8, 08, 10, 40, 00, EB, 01, E3, 60, E8, 03, 00, 00, 00, D2, EB, 0B, 58, EB, 01, 48, 40, EB, 01, 35, FF, E0, E7, 61, 2B, E8, 9C, EB, 01, D5, 9D, EB, 01, 0B, 58, 60, E8, 03, 00, 00, 00, 83, EB, 0E, EB, 01, 0C, 58, EB, 01, 35, 40, EB, 01, 36, FF, E0, 0B, 61, 89, 85, 9F, D3, 41, 00, 9C, EB, 01, D5, 9D, EB, 01, 0B, 58, EB, 01, E3, 60, E8, 03, 00, 00, 00, D2, EB, 0B, 58, EB, 01, 48...
 
[+]

Entropy:
7.9985

Packer / compiler:
PC Guard for Win32 v5.00

Code size:
3 MB (3,148,288 bytes)

Scheduled Task
Task name:
{45C1168F-A7B8-4567-9053-076920CE764D}

Trigger:
Registration (Runs on registration)


Scan onlive.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.