home

FileCloudDrive.exe

FileCloudDrive

CodeLathe, LLC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘CloudDrive’.
Publisher:
CodeLathe LLC  (signed by CodeLathe, LLC)

Product:
FileCloudDrive

Version:
14,90,0,34614

MD5:
d18b908c2739d767a9bacc954c3ef164

SHA-1:
b864184ef54b0e916179ecbd261d7b201b112bbf

SHA-256:
a326f8bed533160cdcd4ef236611e6915f37fb0379c97d03290732c991722377

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/3/2024 3:27:27 PM UTC  (today)

File size:
4.5 MB (4,711,192 bytes)

Product version:
14,90,0,34614

Copyright:
Copyright (C) 2007-2015 CodeLathe LLC

Original file name:
FileCloudDrive.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\fileclouddrive\fileclouddrive.exe

Digital Signature
Signed by:
CodeLathe, LLC

Authority:
thawte, Inc.

Valid from:
11/13/2015 1:00:00 AM

Valid to:
12/11/2017 12:59:59 AM

Subject:
CN="CodeLathe, LLC", OU=Secure Application Development, O="CodeLathe, LLC", L=Plano, S=Texas, C=US

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
2B7010DF5F955A2A1EC41266CD08F159

File PE Metadata
Compilation timestamp:
3/2/2017 8:18:49 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0x27C53C

Entry point:
E8, 2A, 08, 00, 00, E9, 8E, FE, FF, FF, 6A, 10, 68, B0, 8E, 7B, 00, E8, BE, 07, 00, 00, 33, DB, 89, 5D, E0, 88, 5D, E7, 89, 5D, FC, 3B, 5D, 10, 74, 1A, 8B, 4D, 14, E8, CB, 04, 00, 00, 8B, 4D, 08, FF, 55, 14, 8B, 45, 0C, 01, 45, 08, 43, 89, 5D, E0, EB, E1, B0, 01, 88, 45, E7, C7, 45, FC, FE, FF, FF, FF, E8, 0E, 00, 00, 00, E8, C4, 07, 00, 00, C2, 14, 00, 8B, 5D, E0, 8A, 45, E7, 84, C0, 75, 0F, FF, 75, 18, 53, FF, 75, 0C, FF, 75, 08, E8, ED, FC, FF, FF, C3, 55, 8B, EC, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF...
 
[+]

Code size:
2.9 MB (3,058,176 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CloudDrive

Command:
C:\Program Files\fileclouddrive\fileclouddrive.exe


Scan FileCloudDrive.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.