home

webdrive.exe

WebDrive

South River Technologies

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘WebDriveTray’.
Publisher:
South River Technologies, Inc.  (signed by South River Technologies)

Product:
WebDrive

Version:
17, 0, 0, 4551

MD5:
cd5f0006616f1bad55a4cda61b99766f

SHA-1:
a96e49fb80ee0ebc0ea6e06b3621e6edcf98e17a

SHA-256:
158937e55aa32e1dc9f1b4359788315ba60b3a9132af3b1f0dd7b8b62f1a5aa7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 3:08:54 PM UTC  (today)

File size:
12.6 MB (13,178,888 bytes)

Product version:
17, 0, 0, 4551

Copyright:
1996-2016, South River Technologies, Inc.

Trademarks:
South River Technologies®, WebDrive®, GroupDrive®, Titan FTP Server®, DMZedge Server®, Cornerstone MFT®

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\webdrive\webdrive.exe

Digital Signature
Signed by:
South River Technologies

Authority:
VeriSign, Inc.

Valid from:
11/16/2014 4:00:00 PM

Valid to:
2/15/2018 3:59:59 PM

Subject:
CN=South River Technologies, O=South River Technologies, L=Annapolis, S=Maryland, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
16493978058CFEF050D57EA4058BA2A8

File PE Metadata
Compilation timestamp:
3/8/2017 1:11:47 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

Entry address:
0x785898

Entry point:
E8, 0D, 18, 00, 00, E9, 4E, FE, FF, FF, 3B, 0D, 00, 14, FC, 00, F2, 75, 02, F2, C3, F2, E9, 52, 00, 00, 00, C7, 01, 70, FC, DE, 00, C3, 55, 8B, EC, F6, 45, 08, 01, 56, 8B, F1, C7, 06, 70, FC, DE, 00, 74, 0A, 6A, 0C, 56, E8, 23, 04, 00, 00, 59, 59, 8B, C6, 5E, 5D, C2, 04, 00, 55, 8B, EC, 6A, 00, FF, 15, EC, 24, CE, 00, FF, 75, 08, FF, 15, E8, 24, CE, 00, 68, 09, 04, 00, C0, FF, 15, A0, 26, CE, 00, 50, FF, 15, DC, 26, CE, 00, 5D, C3, 55, 8B, EC, 81, EC, 24, 03, 00, 00, 6A, 17, E8, 31, 20, 00, 00, 85, C0, 74...
 
[+]

Entropy:
6.3588

Code size:
8.9 MB (9,307,136 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
WebDriveTray

Command:
C:\Program Files\webdrive\webdrive.exe \trayicon


Scan webdrive.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.