install_copytranscontrolcenter.exe

WindSolutions SA

This is a setup program which is used to install the application. It runs as a scheduled task under the Windows Task Scheduler. This is the uninstaller utility registered in the Windows Control Panel for the program CopyTrans Control Center Uninstall Only by WindSolutions. This is installed with multiple programs including Rimozione di CopyTrans Suite solamente and CopyTrans Suite Remove Only. The file has been seen being downloaded from www.botongnal.com and multiple other hosts.
Publisher:
WindSolutions  (signed by WindSolutions SA)

Version:
3.0.0.3

MD5:
49d7074e7d272c9b6842aa0e397953da

SHA-1:
c6d95fd8dfb1497e4e3deebc22c45576c05f9dae

SHA-256:
9d4f2ac9b88cf8b52de54c65402326f7da0289e184996c9b3652ad0bef105953

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 7:30:25 PM UTC  (today)

File size:
5 MB (5,283,824 bytes)

Product version:
3.0.0.3

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\install_copytranscontrolcenter.exe

Digital Signature
Authority:
COMODO CA Limited

Valid from:
4/29/2014 1:00:00 AM

Valid to:
4/29/2017 12:59:59 AM

Subject:
CN=WindSolutions SA, O=WindSolutions SA, STREET=Chemin de Bochat 11, L=Paudex, S=Vaud, PostalCode=1094, C=CH

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
59C5BCB858690CC038614FE3BC3AFCC3

File PE Metadata
Compilation timestamp:
5/23/2014 3:30:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:S/C8e6PApd0quhY0WbrTFBuwhD5KIdRF4FZ4cvv9UtdYj/yDA:S/C8e6PEddoY7NoiKIdRyfFvWtdYTx

Entry address:
0xFFE000

Entry point:
83, EC, 04, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, 00, 1B, 00, 2D, FF, 91, 0A, 10, 05, F4, 91, 0A, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, D3, D2, 39, 4A, 68, BD, BD, 9C, 5E, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, B1, E1, C4, 86, 3A, 1D, 94, D4, 75, 4B, A1, 89, 52, FB...
 
[+]

Entropy:
7.9843  (probably packed)

Code size:
9.4 MB (9,850,880 bytes)

10 Program Uninstaller
Program name:
CopyTrans Control Center Uninstall Only

Display publisher:
WindSolutions

Display version:
3.003

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall

Program name:
CopyTrans Suite Remove Only

Display publisher:
WindSolutions

Display version:
2.32

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall

Program name:
Rimozione di CopyTrans Suite solamente

Display publisher:
WindSolutions

Display version:
2.37

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall

Program name:
CopyTrans Control Center Alleen Verwijderen

Display publisher:
WindSolutions

Display version:
3.003

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall

Program name:
Kun for fjerning av CopyTrans Control Center

Display publisher:
WindSolutions

Display version:
3.003

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall

Program name:
Remover somente o pacote CopyTrans

Display publisher:
WindSolutions

Display version:
3.003

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall


Scheduled Task
Task name:
{2463998A-B202-409F-95D8-7C47CE3C6946}

Trigger:
Registration (Runs on registration)


The file install_copytranscontrolcenter.exe has been discovered within the following programs.

Publisher's description - “CopyTrans transfers: music, videos, apps, podcasts, audiobooks, smart playlists, artworks, ratings, playcounts, date added and many more! Backup iPod to PC and iPhone to iTunes the correct way!”
www.copytrans.net/copytrans.php
About 7% of users remove it
CopyTrans Suite Remove Only  by WindSolutions
Publisher's description - “CopyTrans makes it easy to recover iPod music and copies your iPhone content directly to your new or empty iTunes library. Run the application, connect your iPhone and start the backup.”
www.copytrans.net
About 2% of users remove it
About 3% of users remove it
About 1% of users remove it
About 2% of users remove it
 
Powered by Should I Remove It?

The file install_copytranscontrolcenter.exe has been seen being distributed by the following 15 URLs.

http://www.botongnal.com/.../cfile8.uf@22534346555AEDE730DD09.exe

https://onedrive.live.com/.../Jc7JKXVipTzFRGbmathh2hph ozlXdLT4jkM=7

http://pop3.co.il/wp-content/plugins/.../download.php?id=101

q=http://www.copytrans.net/.../Install_CopyTrans_Suite.exe&redir_token=jVjEEPMKE_a-2XO-wRP1uBL_O198MTQxOTM3MTQwNkAxNDE5Mjg1MDA2

http://192.168.1.53:1234/storage/emulated/0/.../Install_CopyTransControlCenter.exe

q=http://www.copytrans.net/.../Install_CopyTrans_Suite.exe&redir_token=BK4dliMuQlXAe8J-LycuxCHis7J8MTQyNDgyNDkwM0AxNDI0NzM4NTAz

Scan install_copytranscontrolcenter.exe - Powered by Reason Core Security