Process
ubiquitoussigned
filecoauth.exe
File identity
File details
- File type
- PE32+ executable
- Magic
- PE32+ executable (GUI)
- Architecture
- x64
- Original name
- FileCoAuth.exe
- Internal name
- Microsoft OneDrive
- Product
- Microsoft OneDrive
Signing information
- Status
- Signed
- Signature rate
- 100%
- Publisher
- Microsoft Corporation
- Signer
- Microsoft Corporation
- Issuer
- Microsoft Windows Code Signing PCA 2024
- Thumbprint
- 84b71332947747a3826d84017dfd36960e99b370
File version1
26.088.0510.0004100%
File size1
2290.90 KB100%
Execution context
File paths2
C:\Users\<user>\AppData\Local\Microsoft\OneDrive\26.088.0510.0004\FileCoAuth.exe85.7%C:\Users\<user>\AppData\Local\Microsoft\OneDrive\25.087.0506.0001\FileCoAuth.exe14.3%
User context1
Interactive user100%
Integrity level1
Medium100%
Instances1
1100%
Session1
Session 1100%
Token privileges1
SeChangeNotifyPrivilege100%
Analysis
About this process
No analyst write-up yet.
Security notes
No analyst write-up yet.
Anomaly signals
None defined yet.
Telemetry
OS prevalence1
Windows 11 (26200)100%
Observation timeline
- First seen
- 2026-06-09
- Last seen
- 2026-06-09
- Machines
- 1
- Executions
- 5