home

install_copytrans_suite.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.copytrans.net.
MD5:
d620788dc92b2d842306cfe1d6379ee8

SHA-1:
0c83aa9b32ee8d073a02dc1dc5a286cae33c0192

SHA-256:
5e6bdef4badd441786d5bb16567d508ade48dcf69f876cce698f9b3af1943946

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
4/26/2024 10:46:05 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAutoB
1.3.0.7383

File size:
4.3 MB (4,473,792 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\iphone crap\install_copytrans_suite.exe

File PE Metadata
Compilation timestamp:
10/16/2012 7:28:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:k7T9Jz2QI75DHS2YvL/8DswOIL+a/Y3i6qt0rU:kvvz+DuzUDswLhsFK

Entry address:
0xFAB000

Entropy:
7.7702  (probably packed)

Code size:
11.8 MB (12,345,344 bytes)

The file install_copytrans_suite.exe has been seen being distributed by the following URL.

http://www.copytrans.net/.../Install_CopyTrans_Suite.exe

Scan install_copytrans_suite.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.