home

copytransmanager.exe

CopyTrans Manager

WindSolutions LLC

Publisher:
WindSolutions  (signed by WindSolutions LLC)

Product:
CopyTrans Manager

Version:
0.9.1.1

MD5:
b928784096cbaf8ae89e6ab7b37d73e8

SHA-1:
e7a8bdc62db06cd3bef918915b1646639612ce13

SHA-256:
d562030174bf066eb7130794a4837734a94a52d3a8bed0585cd6bc56f2fc6dad

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/25/2024 10:24:09 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Trojan.Packed.191
9.0.1.020

File size:
6.1 MB (6,396,600 bytes)

Product version:
0.9.1.1

Copyright:
WindSolutions

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytransmanager.exe

Digital Signature
Signed by:
WindSolutions LLC

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/27/2009 8:19:18 PM

Valid to:
5/28/2011 1:54:47 PM

Subject:
CN=WindSolutions LLC, OU=Development, O=WindSolutions LLC, L=Geneva, S=VD, C=CH

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6A2DC8C96041ED2977F679AB181ECC3B

File PE Metadata
Compilation timestamp:
6/22/2010 4:43:32 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
196608:onxTSlU4H3d+3UrUt/wmoGkmW/rCdBoCPY:YSe4H3dQplZWudBnPY

Entry address:
0x1397000

Entry point:
83, EC, 04, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, 10, 14, 00, 2D, 83, 18, 60, 00, 05, 78, 18, 60, 00, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, C1, 10, C6, 60, 68, 18, 8D, 96, 65, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, CC, F6, 38, 91, C8, 7E, B4, 8B, 7C, BA, FD, C1, 19, 8A...
 
[+]

Entropy:
7.9588  (probably packed)

Code size:
10.9 MB (11,456,512 bytes)

Scan copytransmanager.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.