home

ccffacebook.exe

Plura Processing L.P.

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Chit Chat for Facebook’.
Publisher:
Plura Processing L.P.  (signed and verified)

Version:
1.0.0.0

MD5:
62bb1418f6ef34eacc6b8251dc3c8d0e

SHA-1:
431da17bdafa31e84414e3ae1e71e3da7ce5ae35

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 11:59:07 AM UTC  (today)

File size:
5.5 MB (5,801,472 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\chit chat for facebook\ccffacebook.exe

Digital Signature
Signed by:
Plura Processing L.P.

Authority:
VeriSign, Inc.

Valid from:
8/4/2011 3:00:00 AM

Valid to:
9/8/2012 2:59:59 AM

Subject:
CN=Plura Processing L.P., OU=Digital ID Class 3 - Java Object Signing, O=Plura Processing L.P., L=Houston, S=Texas, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
30D0E143F198F2579B16E47EDA3E16AB

File PE Metadata
Compilation timestamp:
11/8/2001 10:33:35 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:DAuly6P6whnScCNM1CSX+tf6FfA3PjHyG6Syl581h0pZVXTLTPLM61JzL+dDu:jlHhhnlC+FfA3PeSGPVM61JPYu

Entry address:
0x3FBCD9

Entry point:
60, F6, DF, 4D, B7, DF, F6, D1, F2, 8B, FB, C1, D9, 06, 15, 86, 80, 36, 72, 8D, 1D, 8F, A4, 96, 7B, 81, F2, 8E, 34, 00, 00, 0F, AC, D8, 4C, 80, F1, 89, 0F, AF, ED, C7, C3, 99, EF, 85, D2, D0, C6, 18, F8, 86, EA, 0F, C0, E1, 0F, AC, CE, D4, E8, 00, 00, 00, 00, 5E, 49, 38, D2, 8A, E3, 0F, A3, F1, 0D, 0E, 30, A5, B8, 0F, B3, CB, 81, C6, F0, 69, 1E, 00, F2, 0F, C0, F4, 0F, C1, DB, 81, EE, 2D, 06, 00, 00, 0F, BD, DE, 0F, AC, F9, 21, 0F, BA, F0, F6, 68, A2, D2, 1F, 00, 56, 0F, BA, FD, 65, F7, D3, 0F, AD, C9, EB...
 
[+]

Entropy:
6.7856

Code size:
4 MB (4,171,776 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Chit Chat for Facebook

Command:
C:\Program Files\chit chat for facebook\ccffacebook.exe


Scan ccffacebook.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.