home

folderclone.exe

FolderClone

Salty Brine Software

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘folderclone’.
Publisher:
Salty Brine Software  (signed and verified)

Product:
FolderClone

Version:
2.00.0002

MD5:
be98ed1519ae255bcc632f65723b6c57

SHA-1:
aafc7ec455ac9ab35d097251ffdd9a469c9e683f

SHA-256:
9b2f686f5fc9b04ff685bfe44592b0e3c7cca465c07ed311b531b62108cf53e4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:49:36 AM UTC  (today)

File size:
746.6 KB (764,488 bytes)

Product version:
2.00.0002

Original file name:
folderclonestand.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\folderclone\folderclone.exe

Digital Signature
Signed by:
Salty Brine Software

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
11/30/2007 10:44:17 PM

Valid to:
11/29/2008 10:44:17 PM

Subject:
CN=Salty Brine Software, OU=Secure Application Development, O=Salty Brine Software, L=Palm Coast, S=Florida, C=US

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
04F5C76E5DCC156D8410AB2138DB4B67

File PE Metadata
Compilation timestamp:
11/25/2008 8:18:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x2A4F9B

Entry point:
E8, 3B, FF, FF, FF, 05, FC, 13, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, FF, 04, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 47, B3, 95, A2, 05, AA, C8, 26, 24, 57, 6F, 07, 0B, FD, 30, CF, D3, 07, 05, 8D, A1, A5, 15, 70, 43, 8C, 9A, A2, FA, DC, EA, 36, 42, 1A, 60, 01, D0, AA, D5, 51, 9E, 8B, F8, 31, 83, 17, DE, B5, F3, 31, 33, 25, 59, 5D, 26, 8E, 21, 69, 33, 18, EE, D6, E0, BC, 46, 92, E3, AA, FC, 74, E8, A7, 92, C2, 0C, B5, CA, D3, 31, F2, 2F, EB, 29, 9D, 5D, 19, D4, A1, C3, 5F, 4E, A6...
 
[+]

Code size:
1.6 MB (1,667,072 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
folderclone

Command:
C:\Program Files\folderclone\folderclone.exe


Scan folderclone.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.