home

ctccsreader.exe

WindSolutions LLC

This is a setup program which is used to install the application. This is the uninstaller utility registered in the Windows Control Panel for the program CopyTrans Suite Remove Only by WindSolutions. This is installed with CopyTrans Suite Remove Only. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
WindSolutions  (signed by WindSolutions LLC)

Version:
2.2.7.0

MD5:
82ffe09a4442a86440234d1f8ba0bdbc

SHA-1:
8996bf3001d6dcd29914643ccdfac967504a4a9c

SHA-256:
556b834480bb19334621bdcd714c0f2d852568dcb5f392308280b3597a3dead4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 7:41:08 AM UTC  (today)

File size:
3.3 MB (3,455,768 bytes)

Product version:
2.2.7.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\ctccsreader.exe

Digital Signature
Signed by:
WindSolutions LLC

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/27/2009 6:19:18 PM

Valid to:
5/28/2011 12:54:47 PM

Subject:
CN=WindSolutions LLC, OU=Development, O=WindSolutions LLC, L=Geneva, S=VD, C=CH

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6A2DC8C96041ED2977F679AB181ECC3B

File PE Metadata
Compilation timestamp:
3/21/2011 3:05:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:keN+7ssGTwznrnzMCZSj/Iitagndv2qb:Orn44Sj/IiL2q

Entry address:
0xB2C000

Entry point:
83, EC, 04, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, 20, 0F, 00, 2D, 66, 81, 09, 10, 05, 5B, 81, 09, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 38, AF, 7B, 52, 68, F2, E2, 86, 04, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, 87, ED, 00, AE, 33, 72, F8, 31, AB, ED, 00, B5, 6B, 67...
 
[+]

Entropy:
7.9470  (probably packed)

Code size:
7.7 MB (8,069,120 bytes)

Program Uninstaller
Program name:
CopyTrans Suite Remove Only

Display publisher:
WindSolutions

Display version:
2.27

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall


The file ctccsreader.exe has been discovered within the following programs.

CopyTrans Suite Remove Only  by WindSolutions
Publisher's description - “CopyTrans makes it easy to recover iPod music and copies your iPhone content directly to your new or empty iTunes library. Run the application, connect your iPhone and start the backup.”
www.copytrans.net
About 2% of users remove it
 
Powered by Should I Remove It?

The file ctccsreader.exe has been seen being distributed by the following 12 URLs.

http://gsf-cf.softonic.com/899/6bf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=85008&instance=softonic_br&type=PROGRAM&Expires=1477279706&Signature=fz7AGNuXYYlv0Kfp6-OITEAxaW15snKCw31fIfULeDmIXoY-86u65Rr-SuY6fxN-Tg-~srpg2YiTksHyQJQTWQd2DPW5UaXTrfFHoDNRMl1uVqYhyLU5XGSpbTGo371M9n~FB028Sl4xom7ASfAZty1YZIpJ6wsy1ov6sK~Ixis_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_CopyTrans_Suite.exe

http://global-shared-files-l3.softonic.com/899/6bf/.../file?nvb=20150118153325&nva=20150119033425&token=0601f92b24185dd1608fd&SD_used=0&channel=WEB&fdh=no&id_file=85008&instance=softonic_it&type=PROGRAM&filename=Install_CopyTrans_Suite.exe

http://dw.uptodown.com/dwn/tgNVBdsSyu9OTeLIlLWdDbkaOUKEkrrTho0M7RPtYWmj-zyiZPeAxreqjvB5KS3uvKaDK9XKSedS9mchJUKEvkEgczn5qWeyF72Qt-C4kObLs779U8W1x-zSolAGq82E/6P6hI7mzdwno8cOPaK-QU0zCXxktkC2gNBhxE8Vlez1uX8Mr-odhEeXuCVvn5WxLPV0ZfSZMQzg1unF1uA1G1co-402srO7uR0aFDqvyuqSrV9dzhn4PrrVb6kYGbdGH/.../

http://dw.uptodown.com/dwn/Hji_LN3Voky8q062GNZWPRREzUVkH3WYJJ-cREvZ3n-LXSg8K-FYIyugL4sQ86HsFE6qtMgSTWlCEfTJdb6WSVFBexPMYjyqd5P-tTq6J9TS85_apuwEHs4WmLX3hNvJ/albLewA4-e0iFfLVdES0yqbDH853nO35HsSoGuslyt_L9pzV0e19xraRQskgk_8bLqok2Wa-NquBDyfLIfXhibpqVzR1957ev2jxUa8FSFRahMN3wV8kohbzgkCA1x1-/aPClEjBXSJmdkCIf0yLZRj7FUnA0MDQ-R8y5xn7DmRmi6Lex_lm7XckfjgDPHjbWiRQDqlxjPWKYTYCUGI9IVAKglif6s9yD2rJ4w-SH-yhW6GQqKDkpkls8l2ZDjFe9/.../

http://gsf-cf.softonic.com/899/6bf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=85008&instance=softonic_br&type=PROGRAM&Expires=1470631275&Signature=Akj39lsgG3txwGTX3LWsz4Z9oA6lTmJXsHEjymaTiOc4hspj6464L9xv7rdmF5VfpijXOvWLxUtpa1dYRKZqltS33348xlf7gelcPpHawfmAWahmDhu7Bhe5MB9NR96yTQ8J-69yi-hM-a5UEA2aZM-WpCIP9TNX1SkLkHjTk8E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_CopyTrans_Suite.exe

http://gsf-cf.softonic.com/899/6bf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=85008&instance=softonic_br&type=PROGRAM&Expires=1478400616&Signature=gH2bhuUTTCD6B6q-Yjo2WxsGoiIhVUx0VFL-BIdaImyM-Bcd6DceIG9CSrXptkHATO9vW856IyGOZzZyyLX-tDr6Gauc8RyiEb187E~p0p0uJOn5JlNolSq~f2MvGsLshZI5OPh-7~QNZ9K6iiLxUHJzq6hPhLb3pAuU5QDAj9w_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_CopyTrans_Suite.exe

http://gsf-cf.softonic.com/899/6bf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=85008&instance=softonic_it&type=PROGRAM&Expires=1426741237&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=XqJ-hayAzt4Hcf7G4BI16wR6Jk5kgVOIZe6LzI2rERYqCze499E~DMaZer9bBR1LRWvjosdsYZxrbIKGrNc0lCtWGBbQv8rGEEocyR6oCtu2tF~3D0JSRx7mXGzMeAV0s53n8wWVhU2VjBrUsGWGKOujDLNt95uMO4D6G1n0PP8_&filename=Install_CopyTrans_Suite.exe

http://gsf-cf.softonic.com/899/6bf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=85008&instance=softonic_it&type=PROGRAM&Expires=1447555521&Signature=VL9c5drlA4laDWuGxrl1wIiDw8vm4oX9qectLaANUO2dIzheJAvIV73AJqxB56Wpd1gyo8cN8xh57MyECKXNJovz7mCV8dJnxYOQ5~Tuu7dZB0aQUcEjkAw0Pj6I8nc9uoVeSQEa2hNCRXCkIIOxpT00gJIdxZ~jjjIkzy7ItKM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_CopyTrans_Suite.exe

http://gsf-cf.softonic.com/899/6bf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=85008&instance=softonic_it&type=PROGRAM&Expires=1427415816&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=cG3QZ~B8a03-SGPN3fv02yoPhGh~GOMkjMLXcMe~R34QDcAOpk9UxYWJ5LpyGMOrPRsyUI-ZRLzqfcCVkdKq23oLsoZjqKFu8fGWQwAKHnNWp~05OYsgPztY2fS89ICig6QyHdt4m1j7zOQzmJTNs7Owed1lt9l7hXdGMas61tA_&filename=Install_CopyTrans_Suite.exe

http://gsf-cf.softonic.com/899/6bf/.../file?SD_used=0&channel=WEB&fdh=no&id_file=66027&instance=softonic_en&type=PROGRAM&Expires=1445831021&Signature=H0R-lvylLUwEBDveVx4R2gvuL7UnZhvwoJ-f-sDkzkACeBgPBle-dNKcLwziV05DM5zmSAkuxAsnJNl2v3Oo9FrSZ4O-AKpHcIFGYYPS4r4pSjYYl4t35SdIMkUheCYTUTvRLRs6dnu8oBMa3YlgHDLCssMqo~aVu6HMV~UWkoI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Install_CopyTrans_Suite.exe

http://www.copytrans.net/.../Install_CopyTrans_Suite.exe

http://212.143.197.6/cache/.../Install_CopyTrans_Suite.exe

Scan ctccsreader.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.