home

copytrans_suite_v3.010_es.exe

WindSolutions SA

This is a setup program which is used to install the application. This is installed with CopyTrans Control Center Uninstall Only. The file has been seen being downloaded from es.copytrans.net and multiple other hosts.
Publisher:
WindSolutions  (signed by WindSolutions SA)

Version:
3.0.1.0

MD5:
13410415bd13f4d630d3fef5011b93ac

SHA-1:
52e2d9536feec0dc61f2d892728ccbdc56aec6c2

SHA-256:
73d3a6b56bc641c67ec462e4442aeb0612ee8fc5135c26581078f87341cd0d38

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:05:50 PM UTC  (a few moments ago)

File size:
5.4 MB (5,641,744 bytes)

Product version:
3.0.1.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytrans_suite_v3.010_es.exe

Digital Signature
Signed by:
WindSolutions SA

Authority:
COMODO CA Limited

Valid from:
4/28/2014 7:00:00 PM

Valid to:
4/28/2017 6:59:59 PM

Subject:
CN=WindSolutions SA, O=WindSolutions SA, STREET=Chemin de Bochat 11, L=Paudex, S=Vaud, PostalCode=1094, C=CH

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
59C5BCB858690CC038614FE3BC3AFCC3

File PE Metadata
Compilation timestamp:
4/15/2015 7:18:37 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:/o24XW7QC8G6Z2fT4o5g1CQwRerMPtBxL72Oy+dCh/OHepz4J3L:/aIaLZ2sHwQtMPtvLKOy+ohO+ZOb

Entry address:
0x1152000

Entry point:
56, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, 10, 21, 00, 2D, 20, EC, 0C, 10, 05, 17, EC, 0C, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 58, 84, 8D, 33, 68, 78, B0, DB, 02, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, AF, FE, B8, 3D, 1E, 2B, 91, F7, 2A, EA, DB, 6B, 67, 1A, 45, 12...
 
[+]

Entropy:
7.9808  (probably packed)

Code size:
10 MB (10,522,624 bytes)

The file copytrans_suite_v3.010_es.exe has been discovered within the following program.

CopyTrans Control Center Uninstall Only  by WindSolutions
About 7% of users remove it
 
Powered by Should I Remove It?

The file copytrans_suite_v3.010_es.exe has been seen being distributed by the following 7 URLs.

http://es.copytrans.net/.../Install_CopyTrans_Suite.exe

http://us2-es.copytrans.net/.../Install_CopyTransControlCenter.exe

http://cdn.portalprogramas-download.com/d/.../CopyTrans-Manager

q=http://es.copytrans.net/.../Install_CopyTrans_Suite.exe&redir_token=C_hZfvSsH98mZz835002wU7tkmF8MTQzNjExMTA2N0AxNDM2MDI0NjY3

q=http://es.copytrans.net/.../Install_CopyTrans_Suite.exe&redir_token=0bHiXhRwuN1cKarSEqgch60j6yh8MTQzMTEwNjkzOUAxNDMxMDIwNTM5

q=http://es.copytrans.net/.../Install_CopyTrans_Suite.exe&redir_token=0SsR5A4GQHBPSp6pM9E5kn2PRB18MTQzNTM3NDQwMEAxNDM1Mjg4MDAw

http://es.copytrans.net/.../Install_CopyTransControlCenter.exe

Scan copytrans_suite_v3.010_es.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.