ccsetup210.exe

CCleaner

Piriform Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with multiple programs including CCleaner. The file has been seen being downloaded from s7131.chomikuj.pl and multiple other hosts.
Publisher:
Piriform Ltd  (signed and verified)

Product:
CCleaner

Description:
CCleaner Installer

Version:
2.0.0.0

MD5:
668a86039ad09cd881a557d55c6c9c4e

SHA-1:
de6f78d445066d6246f97674d54e24a50b2335dd

SHA-256:
261b03fb515ecbd882b8022fd27e54d5a572210a2fd8a35b660d76ed9de1e29a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
6/26/2025 7:33:24 AM UTC  (today)

File size:
2.8 MB (2,922,072 bytes)

Copyright:
©2005-2008 Piriform Ltd

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
7/22/2008 2:00:00 AM

Valid to:
8/24/2009 1:59:59 AM

Subject:
CN=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Piriform Ltd, L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0A5BB8CAAFC1479F9D09B10F759F4888

File PE Metadata
Compilation timestamp:
5/3/2008 4:08:42 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:FB4FGOrRTd0rTt/orx4tHmw2F8+DttxMGvt6qinIUlsyIi4Kk12:FmBTqrRA4tHb/+DGGvNiIIsy3452

Entry address:
0x3225

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 28, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, F9, 2A, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 50, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B0, 91, 40, 00, 68, A0, 36, 42, 00, E8, B0, 27, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 9E, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file ccsetup210.exe has been discovered within the following programs.

CCleaner  by Piriform
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.
www.piriform.com/ccleaner
3% remove it
Java 7 Update 17  by Oracle Corporation
Publisher's description - “Java technology allows you to work and play in a secure computing environment. Java allows you to play online games, chat with people around the world, calculate your mortgage interest, and view images in 3D, just to name a few.”
java.com
1% remove it
 
Powered by Should I Remove It?

The file ccsetup210.exe has been seen being distributed by the following 11 URLs.

http://s7131.chomikuj.pl/File.aspx?e=je8ubDREUInqZC6MgWhwl8qaRoNbfWhOV-6MaLcYYkzjEAEQi6Lp5hF7pyXzuKvkHBataCeaXxuMjcq_km-0wh38BEyAqjZDssll6EQLZMWwrIPscnzgd5P1Y2FJ6vcD6kPyW1Zate3VfZYj9kC-kw&pv=2

http://s7131.chomikuj.pl/File.aspx?e=je8ubDREUInqZC6MgWhwl-20qCLL21Vy6XFaEmUR5icaDlV8GKfgL1Ltbo4aTXb445okb91fjguTF7E-ZiqAuGSiHUkVM41oLFetAnxsud1WNCFhns4PVeBo6S6_23mtMKuO2oLYe1HU9SnuoxvBdg&pv=2

http://s7131.chomikuj.pl/File.aspx?e=je8ubDREUInqZC6MgWhwl7eo16lKBqfl2RzwqUCqIB2gLHrUshZF8O_anfcjIMkLDlJnuadpD2mrdSCm8YYlwWz4Yw2mnLeDab62SABzPDOjtbpZ7YrL2tOHH8Trlmnq9lbJAnNjAhoe2gwGj2t8PQ&pv=2

http://s7131.chomikuj.pl/File.aspx?e=je8ubDREUInqZC6MgWhwl16XA1vshxuDwEGgDmQ05VfqsTgVzkTvWuUOwYAjYWFMLNKjXcRO-zrfoHXxEZddy_8WGZh9QPvBmEe8SDJJTFYcKChdsgczg1uCyMdywXR6QAhbb1NJTAAKkET34xk2-w&pv=2

Scan ccsetup210.exe - Powered by Reason Core Security