home

ccleaner.exe

CCleaner

Piriform Ltd

This is a setup program which is used to install the application. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘CCleaner Monitoring’. This is installed with CCleaner. The file has been seen being downloaded from download.piriform.com.
Publisher:
Piriform Ltd  (signed and verified)

Product:
CCleaner

Version:
4, 11, 00, 4619

MD5:
04505c46f9cb7d8f8769b566edc42282

SHA-1:
46722ae2b6c1e5b528ef87ef7cc634f8a693fb53

SHA-256:
2321b85f28f1014e702bf870738ea3886f37577c700891d430d2d7cb9107cca6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 1:25:45 AM UTC  (today)

File size:
4.3 MB (4,505,368 bytes)

Product version:
4, 11, 00, 4619

Copyright:
Copyright © 2005-2014 Piriform Ltd

Original file name:
ccleaner.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ccleaner\ccleaner.exe

Digital Signature
Signed by:
Piriform Ltd

Authority:
VeriSign, Inc.

Valid from:
6/25/2013 2:00:00 AM

Valid to:
9/25/2015 1:59:59 AM

Subject:
CN=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Piriform Ltd, L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
785AF6D521F67E132D53385742CE9B35

File PE Metadata
Compilation timestamp:
2/19/2014 3:42:01 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:R9DKJw6gYbRDZQWJE1IN0dsXFdl8XJO9Xbl:rWw0VD1MIN0CXFdl8XJOhbl

Entry address:
0x9615F

Entry point:
E8, B5, DD, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, 00, 99, 74, 00, 00, 74, 05, E9, 18, DE, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83, E2, 03, C1, E9, 02, 74, 06, F3, AB, 85, D2, 74, 0A, 88, 07, 83, C7, 01, 83, EA, 01, 75, F6...
 
[+]

Code size:
2.4 MB (2,518,016 bytes)

4 Scheduled Tasks
Task name:
CCleanerClean

Trigger:
Logon (Runs on logon)

Action:
ccleaner.exe \auto

Task name:
CCleanerSkipUAC

Action:
ccleaner.exe $(arg0)

Task name:
CCleanerClean

Trigger:
Daily (Runs daily at 17:35)

Action:
ccleaner.exe \auto

Task name:
CCleaner

Trigger:
Daily (Runs daily at 3:55 AM)

Action:
ccleaner.exe \auto


2 Startup Files (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CCleaner Monitoring

Command:
"C:\Program Files\ccleaner\ccleaner.exe" \monitor

Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
CCleaner

Command:
"C:\Program Files\ccleaner\ccleaner.exe" \auto


User Start Menu Item
Name:
ccleaner.exe


Windows Firewall Allowed Program
Name:
C:\Program Files\CCleaner\CCleaner.exe


The file ccleaner.exe has been discovered within the following programs.

CCleaner  by Piriform
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.
www.piriform.com/ccleaner
3% remove it
 
Powered by Should I Remove It?

The file ccleaner.exe has been seen being distributed by the following URL.

http://download.piriform.com/ccsetup411.exe

Scan ccleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.