Install_CopyTrans_Suite.exe

WindSolutions Ltd

This is a setup program which is used to install the application. This is the uninstaller utility registered in the Windows Control Panel for the program CopyTrans Suite Remove Only by WindSolutions. This is installed with CopyTrans Suite Remove Only. The file has been seen being downloaded from www.vaultflashapplication.com and multiple other hosts.
Publisher:
WindSolutions  (signed by WindSolutions Ltd)

Version:
2.3.7.0

MD5:
411483ce4b7b8da2ad96b0c2fa543c74

SHA-1:
2ae7d18a28ca2b69ef80c132b5e13febeb2946ce

SHA-256:
801c52c8977e59e9a32f2e4bd8c8a66095d612c5f20d9c142bd39eb095f45ef3

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/14/2024 9:07:01 PM UTC  (today)

File size:
4.3 MB (4,473,792 bytes)

Product version:
2.3.7.0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\install_copytrans_suite.exe

Digital Signature
Authority:
The USERTRUST Network

Valid from:
5/25/2011 8:00:00 PM

Valid to:
5/25/2014 7:59:59 PM

Subject:
CN=WindSolutions Ltd, O=WindSolutions Ltd, STREET=Bochat 11, L=Paudex, S=Vaud, PostalCode=1094, C=CH

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
653AA7B47DFEC6E9129A06A45D297BAA

File PE Metadata
Compilation timestamp:
10/16/2012 8:28:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
98304:k7T9Jz2QI75DHS2YvL/8DswOIL+a/Y3i6qt0rU7vcB:kvvz+DuzUDswLhsFK5UB

Entry address:
0xFAB000

Entry point:
83, EC, 04, 50, 53, E8, 01, 00, 00, 00, CC, 58, 89, C3, 40, 2D, 00, 80, 0E, 00, 2D, 7F, CF, 09, 10, 05, 74, CF, 09, 10, 80, 3B, CC, 75, 19, C6, 03, 00, BB, 00, 10, 00, 00, 68, 61, 8A, F1, 68, 68, A2, 40, 29, 38, 53, 50, E8, 0A, 00, 00, 00, 83, C0, 00, 89, 44, 24, 08, 5B, 58, C3, 55, 89, E5, 50, 53, 51, 56, 8B, 75, 08, 8B, 4D, 0C, C1, E9, 02, 8B, 45, 10, 8B, 5D, 14, 85, C9, 74, 0A, 31, 06, 01, 1E, 83, C6, 04, 49, EB, F2, 5E, 59, 5B, 58, C9, C2, 10, 00, B3, C8, F2, 88, 4B, A5, AE, B3, 07, 6E, 5B, 4C, 72, 9E...
 
[+]

Entropy:
7.9660  (probably packed)

Code size:
11.8 MB (12,345,344 bytes)

4 Program Uninstaller
Program name:
CopyTrans Suite Remove Only

Display publisher:
WindSolutions

Display version:
2.37

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall

Program name:
Rimozione di CopyTrans Suite solamente

Display publisher:
WindSolutions

Display version:
2.37

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall

Program name:
CopyTrans Suite Alleen Verwijderen

Display publisher:
WindSolutions

Display version:
2.37

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall

Program name:
Fjern kun CopyTrans Suite

Display publisher:
WindSolutions

Display version:
2.37

Uninstall string:
C:\users\{user}\appdata\roaming\windsolutions\copytranscontrolcenter\applications\copytranscontrolcenter.exe \uninstall


The file Install_CopyTrans_Suite.exe has been discovered within the following programs.

Publisher's description - “CopyTrans transfers: music, videos, apps, podcasts, audiobooks, smart playlists, artworks, ratings, playcounts, date added and many more! Backup iPod to PC and iPhone to iTunes the correct way!”
www.copytrans.net/copytrans.php
About 7% of users remove it
CopyTrans Suite Remove Only  by WindSolutions
Publisher's description - “CopyTrans makes it easy to recover iPod music and copies your iPhone content directly to your new or empty iTunes library. Run the application, connect your iPhone and start the backup.”
www.copytrans.net
About 2% of users remove it
About 3% of users remove it
About 1% of users remove it
 
Powered by Should I Remove It?

The file Install_CopyTrans_Suite.exe has been seen being distributed by the following 16 URLs.

http://www.vaultflashapplication.com/cnyz6LRh HX5XMzIAXUGhH26C_tr0yzZZbmG3PLthsMZ8qQ6xFwz9lLoOtd_Rg2PchP_NZ AmeQ63rTGXZI4NDU7cUFBVzW0lsCiUE_FcQ61drjHpBIJmIv L2uD6ehjXoEQ4fzdcjlSfjzqwbDrDfNMDl1n9SFm2E5z4afsq gAb_UgoGei2lzqQ9R3nlr8RYEuVs0C-Ow==

http://69.4.238.159/clr/.../copytrans.exe

http://146.185.26.220/clr/.../copytrans.exe

q=http://www.copytrans.net/.../Install_CopyTrans_Suite.exe

q=http://www.copytrans.net/.../Install_CopyTrans_Suite.exe&redir_token=iwtBHFNrcIspNzSzePm4KfZQHK98MTM5NzQ4ODgyNEAxMzk3NDAyNDI0

Scan Install_CopyTrans_Suite.exe - Powered by Reason Core Security