home

ccp.exe

Combined Community Codec Pack

CCCP Project

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from dl15.afterdawn.com and multiple other hosts a known adware distribution point operated by AfterDawn.
Publisher:
CCCP Project

Product:
Combined Community Codec Pack

Description:
Playback Pack Installer

Version:
2009.09.09.0

MD5:
1c9cecf3231b2ebc4191c70e5c11ed1d

SHA-1:
d8d42b929fcc479988bbd42da06372941dfc5688

SHA-256:
af4c23fe0107de075f98b5ed830b4b5174d2650bdc966d84e5a2ed1f5b3e9476

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/9/2024 9:28:13 AM UTC  (today)

File size:
5.9 MB (6,238,105 bytes)

Product version:
2009.09.09.0

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\logs\ccp.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:/Dfr1yTWJ9KS3tta/hafLcg9z5K12rufRt+dKZVdGYAds+aTrsB4kPii31X8le/+:2Wzxta5azlK0rARkcdGXds+crsB4kNFq

Entry address:
0x9A94

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 32, 96, FF, FF, E8, 39, A8, FF, FF, E8, 64, CA, FF, FF, E8, AB, CA, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 47, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 10, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 94, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, E3, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Code size:
36.5 KB (37,376 bytes)

The file ccp.exe has been discovered within the following programs.

KoolPlaya  by AKi-Software
About 3% of users remove it
Nitro PDF Professional  by Nitro PDF Software
Publisher's description - “Nitro PDF Professional lets you easily create industry-standard PDF files from almost any file format. And sharing is seamless: any PDF created in Nitro Pro can be opened and viewed on virtually any machine, and will display identically to what you intended it to.”
www.nitropdf.com/es
About 9% of users remove it
 
Powered by Should I Remove It?

The file ccp.exe has been seen being distributed by the following 6 URLs.

http://dl15.afterdawn.com/download/7b2afa1adbb7efe82a09a3164557a2cc/580795d8/.../Combined-Community-Codec-Pack-2009-09-09.exe

http://www.afterdawn.com/software/general/.../cccp?mirror_id=0&version_id=20772&software_id=879

http://www.afterdawn.com/software/.../download.cfm?version_id=20772&software_id=879&mirror_id=0&installer=0&perion=0&air_installer=0

http://home.comcast.net/~jumboshrimp/.../Combined-Community-Codec-Pack-2009-09-09.exe

ftp://c33496ed148fe221bf9d5dbf491f8c1b:1351485247@soft.archive1.clubic.com/soft/.../combined-community-codec-pack_combined_community_codec_pack_2009-09-09_anglais_26882.exe

http://67.159.45.251/.../Combined-Community-Codec-Pack-2009-09-09.exe

Scan ccp.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.