home

memoclip.exe

Code Sector

This is a setup program which is used to install the application. This is installed with TeraCopy 2.27. The file has been seen being downloaded from www.codesector.com and multiple other hosts.
Publisher:
Code Sector  (signed and verified)

MD5:
e3be90577b5a57b4be2dd3e56a0fef87

SHA-1:
7b14565b72c8b8e37a24caa1271feaceb289afc2

SHA-256:
43740d8582c3e8895f2a3f4fc9c2dacf6b5bc2bce4249a2b4bdd39f027863af9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 2:54:27 PM UTC  (today)

File size:
687.5 KB (703,984 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Code Sector

Authority:
VeriSign, Inc.

Valid from:
10/25/2011 8:00:00 PM

Valid to:
10/25/2012 7:59:59 PM

Subject:
CN=Code Sector, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Code Sector, L=Volzhsky, S=Volgograd region, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
27FDC908767179534AB3EBBA1D098533

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:Wp4xk4j1twQKoF4jBzZc8XM/FaoHzZV/EoxkmubdzmYzrLgwlkbIiAx17jqfJBNE:WpOVKoF4jBzZc88FzPHkvhzmYD5iM7k/

Entry address:
0xBF1C

Entry point:
55, 8B, EC, 83, C4, B8, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, BC, 89, 45, B8, E8, 2F, 71, FF, FF, E8, 96, 85, FF, FF, E8, 35, A7, FF, FF, E8, 7C, A7, FF, FF, E8, 6B, A8, FF, FF, E8, F6, FA, FF, FF, BE, 20, FF, 40, 00, 33, C0, 55, 68, 28, C5, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E7, C4, 40, 00, 64, FF, 32, 64, 89, 22, 8D, 55, F0, 33, C0, E8, 97, F2, FF, FF, 8B, 55, F0, B8, 84, FC, 40, 00, E8, EA, 71, FF, FF, 8B, 15, 84, FC, 40, 00, B8, 88, FC, 40, 00, E8, BF, 7B, FF, FF, C6, 05, 33, F0, 40, 00...
 
[+]

Entropy:
7.9602  (probably packed)

Code size:
45.5 KB (46,592 bytes)

The file memoclip.exe has been discovered within the following program.

TeraCopy 2.27  by Code Sector Inc.
Publisher's description - “TeraCopy is designed to copy and move files at the maximum possible speed. It skips bad files during the copying process, and then displays them at the end of the transfer so that you can see which ones need attention.”
www.teracopy.com
1% remove it
 
Powered by Should I Remove It?

The file memoclip.exe has been seen being distributed by the following 2 URLs.

http://www.codesector.com/.../memoclip.exe

http://codesector.com/.../memoclip.exe

Scan memoclip.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.