» teracopy227.exe
Overview
Analysis
File Details
Programs (4)
Downloads (55)

teracopy227.exe

TeraCopy

Code Sector

The program is a setup application that uses the Inno Setup installer. This file is installed with multiple programs including TeraCopy 2.27. The file has been seen being downloaded from download1758.mediafire.com and multiple other hosts.

File name:

teracopy227.exe

Publisher:

Code Sector (signed by Code Sector)

Product:

TeraCopy

Description:

TeraCopy Setup

MD5:

c48eb4a27fa0be40500ec2973b9233f0

SHA-1:

57da5e3ca6812c0aa4a6af35abc06d0c6ff70712

SHA-256:

11bc387ff2831a72556e913c9a39ffd03c19cb2015074613307054ecaf9dc559

Scanner detections:

1 / 68

Status:

Clean (1 probable false positive detection)

Explanation:

This is mosty likely a false positive detection, the file is probably clean.

Analysis date:

12/25/2024 1:07:20 PM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Suspicious

7.1.1

File size:

2.8 MB (2,941,528 bytes)

File type:

Executable application (Win32 EXE)

Installer:

Inno Setup

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\teracopy227.exe

Digital Signature

Signed by:

Code Sector

Authority:

VeriSign, Inc.

Valid from:

10/25/2011 8:00:00 PM

Valid to:

10/25/2012 7:59:59 PM

Subject:

CN=Code Sector, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Code Sector, L=Volzhsky, S=Volgograd region, C=RU

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

27FDC908767179534AB3EBBA1D098533

File PE Metadata

Compilation timestamp:

6/19/1992 6:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:ta+lfPdUO65woUCdvc33aqB95HvEGy/pLoQEFrroEJrED9QmgKiM8HuFwR+:c+lfPdcxcnaqBb7y1ofhRED9QFJZjA

Entry address:

0x9C40

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD... 
[+]

Entropy:

7.9969

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

37 KB (37,888 bytes)

The file teracopy227.exe has been discovered within the following programs.

Angry Birds Rio by Rovio

Publisher's description - “In Angry Birds Rio, the original Angry Birds are kidnapped and taken to the magical city of Rio de Janeiro, where they eventually escape their captors and set out to save their friends, Blu and Jewel – two rare macaws and the stars of the hit motion picture, Rio.”

www.rovio.com

9% remove it

Eye Pro by Classle Soft

www.classlesoft.in/eye-pro

9% remove it

MAGIX Photo Manager 12 by MAGIX AG

Publisher's description - “Within one single program, MAGIX Photo Manager 12 Deluxe combines everything you need for creating image archives, optimizing photos and presenting your slideshows on a PC or on the go.”

10% remove it

TeraCopy 2.27 by Code Sector Inc.

Publisher's description - “TeraCopy is designed to copy and move files at the maximum possible speed. It skips bad files during the copying process, and then displays them at the end of the transfer so that you can see which ones need attention.”

www.teracopy.com

1% remove it

The file teracopy227.exe has been seen being distributed by the following 50 URLs.

http://download1758.mediafire.com/u6u6ebo2w6bg/.../teracopy227.exe