install_copytrans_suite.exe

WindSolutions LLC

This is a setup program which is used to install the application. This is the uninstaller utility registered in the Windows Control Panel for the program Nur Deinstallierung der CopyTrans Suite möglich.. The file has been seen being downloaded from tmpfile11286.s3.amazonaws.com and multiple other hosts.
Publisher:
WindSolutions  (signed by WindSolutions LLC)

Version:
1.7.3.0

MD5:
2ff2fc197b798e1a6d7875573c047527

SHA-1:
6f79dfa394c81be604db624ab515446cdf06be1b

SHA-256:
646c3af1949d8a25821ec9a884a419b9f4dac09736184cfab7e1e03761f51d9b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
1/9/2025 5:28:37 AM UTC  (today)

File size:
1.1 MB (1,114,536 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\users\{user}\downloads\install_copytrans_suite.exe

Digital Signature
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/27/2009 6:19:18 PM

Valid to:
5/28/2011 12:54:47 PM

Subject:
CN=WindSolutions LLC, OU=Development, O=WindSolutions LLC, L=Geneva, S=VD, C=CH

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6A2DC8C96041ED2977F679AB181ECC3B

File PE Metadata
Compilation timestamp:
6/19/2009 2:07:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
24576:gTE0JClMm6RS5RwYEJRmNqF0RGUmShH8xU:ggnl7Q6EJsy0IUmSV

Entry address:
0x1000

Entry point:
EB, 06, 68, 2E, A8, 00, 00, C3, 9C, 60, E8, 02, 00, 00, 00, 33, C0, 8B, C4, 83, C0, 04, 93, 8B, E3, 8B, 5B, FC, 81, EB, 3F, 90, 40, 00, 61, 9D, E9, DB, 19, 59, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Packer / compiler:
PECompact v1.4x+

Program Uninstaller
Program name:
Nur Deinstallierung der CopyTrans Suite möglich.

Uninstall string:
C:\Program Files (x86)\WindSolutions\CopyTrans Suite\CopyTransControlCenter.exe uninstall


The file install_copytrans_suite.exe has been seen being distributed by the following 4 URLs.

https://tmpfile11286.s3.amazonaws.com/download77/ic_trackings/11901/.../copytrans.exe

Scan install_copytrans_suite.exe - Powered by Reason Core Security