» onlive_updater_1390428393.exe
Overview
Analysis
File Details
Programs (1)

onlive_updater_1390428393.exe

OnLive Standalone Client for Windows

buildserver

This file is installed with the program OnLive.

File name:

Publisher:

OnLive, Inc. (signed by buildserver)

Product:

OnLive Standalone Client for Windows

Description:

OnLive Standalone Windows Client 1.0.7.602.121463

Version:

1.0.7.602.121463

MD5:

018ec6f2551089d2c97f4c5cad2d49ef

SHA-1:

f04055f28e858ac7a0f21b0f73492a961e8ba601

SHA-256:

c66cc415c0f87c9f8853aaa3a389ed1f8fc3f955ccd0187181474668af37f5b9

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/16/2024 12:16:49 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Packed/PC-Guard

7.1.1

Bkav FE

W32.HfsAutoB

1.3.0.4924

Rising Antivirus

PE:Malware.XPACK/RDM!5.1

23.00.65.14526

File size:

6.2 MB (6,543,864 bytes)

Product version:

1.0.7.602.121463

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\temp\onlive_updater_1390428393.exe

Digital Signature

Signed by:

buildserver

Authority:

ONLIVE (Corp) Subordinate CA 02

Valid from:

5/22/2013 7:34:48 PM

Valid to:

9/10/2013 10:20:16 PM

Subject:

E=buildserver@onlive.com, CN=buildserver, OU=Roles, DC=onlive, DC=corp

Issuer:

CN=ONLIVE (Corp) Subordinate CA 02, DC=onlive, DC=corp

Serial number:

5CD95949000500001D87

File PE Metadata

Compilation timestamp:

8/6/2013 1:43:35 AM

OS version:

4.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

98304:VsK19//6+4SehD0aS1E78cxjHwb1UUy5MtWeofZbnZ0i4y39aCv1SwNxtJEkXGrM:Lf//66KD0aF78yHG1URHZ0439hBxP

Entry address:

0x646400

Entry point:

FC, 55, 50, E8, 00, 00, 00, 00, 5D, 60, E8, 03, 00, 00, 00, 83, EB, 0E, EB, 01, 0C, 58, EB, 01, 35, 40, EB, 01, 36, FF, E0, 0B, 61, B8, 08, 10, 40, 00, EB, 01, E3, 60, E8, 03, 00, 00, 00, D2, EB, 0B, 58, EB, 01, 48, 40, EB, 01, 35, FF, E0, E7, 61, 2B, E8, 9C, EB, 01, D5, 9D, EB, 01, 0B, 58, 60, E8, 03, 00, 00, 00, 83, EB, 0E, EB, 01, 0C, 58, EB, 01, 35, 40, EB, 01, 36, FF, E0, 0B, 61, 89, 85, 9F, D3, 41, 00, 9C, EB, 01, D5, 9D, EB, 01, 0B, 58, EB, 01, E3, 60, E8, 03, 00, 00, 00, D2, EB, 0B, 58, EB, 01, 48... 
[+]

Packer / compiler:

PC Guard for Win32 v5.00

Code size:

2.9 MB (3,040,768 bytes)

The file onlive_updater_1390428393.exe has been discovered within the following program.

OnLive by OnLive

OnLive is a company offering a cloud gaming platform and a cloud desktop system. The gaming platform is available using the OnLive Game System. All games on the service are available in 720p format.

www.onlive.com

About 9% of users remove it

Scan onlive_updater_1390428393.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.