home

ccsetup505.exe

CCleaner

Piriform Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from fs30.filehippo.com and multiple other hosts.
Publisher:
Piriform Ltd  (signed and verified)

Product:
CCleaner

Description:
CCleaner Installer

Version:
2.0.0.0

MD5:
71117b17cea0797929e887aada9b59b1

SHA-1:
81144d6c8b14a323fdb72deb5550acb342dae29f

SHA-256:
645c8f757140c474c2c01915e501a09a1f67ae7b48ad1252b72cbcc308c7ca20

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:32:29 PM UTC  (today)

File size:
6.2 MB (6,480,808 bytes)

Copyright:
Copyright © 2005-2015 Piriform Ltd

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Digital Signature
Signed by:
Piriform Ltd

Authority:
VeriSign, Inc.

Valid from:
6/25/2013 1:00:00 AM

Valid to:
9/25/2015 12:59:59 AM

Subject:
CN=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Piriform Ltd, L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
785AF6D521F67E132D53385742CE9B35

File PE Metadata
Compilation timestamp:
2/24/2012 7:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:bXP0ed7QkQyJPr0fpv+HyHuoJ3SlY3ldUldFGpGg9SYxeHRCuTFM+an7kp0j6:75duyJPrcdOPlY3ldUlapGpfC+FMZW

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9979

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file ccsetup505.exe has been seen being distributed by the following 21 URLs.

http://fs30.filehippo.com/4039/.../ccsetup505.exe

&onid=18512&oid=3001-18512_4-10315544&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/maintenance&topicbrcrm=&pid=14248452&mfgid=6300943&merid=6300943&ctype=dm&cval=NONE&devicetype=desktop&pguid=7bf42c1506a4d7dd269df69c&viewguid=VIgR7uQxcZ3abHZLcBrev7zbwluO1W-s5GJo&destUrl=http://software-files-a.cnet.com/s/software/14/24/84/.../ccsetup505.exe

https://downloader.disk.yandex.ru/disk/341172b8a9393498ea9906ec3bccf3b9cb03abb673792a7a37ba633ba7f1369c/56e9a451/.../x-msdownload&fsize=6480808&hid=7e15658178ec359eaa03cfcc1c9de995&media_type=executable&tknv=v2

https://downloader-default9h.disk.yandex.net/rdisk/a70692235c2d6d74bab82b3b4b930b5de9fb07551b9619d1cb68249e65a7fdd6/56ad0d41/.../x-msdownload&fsize=6480808&hid=7e15658178ec359eaa03cfcc1c9de995&media_type=executable&tknv=v2&rtoken=a1d7e9ed12d2f56c6fa8c580253584d0&force_default=no&ycrid=na-bc808194898dfce92e8aa9eaa7afe26f-downloader13e

&onid=18512&oid=3001-18512_4-10315544&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/maintenance&topicbrcrm=&pid=14248452&mfgid=6300943&merid=6300943&ctype=dm&cval=NONE&devicetype=desktop&pguid=d9c8b3ec3a0968c9b22b9bcd&viewguid=U7qRYZqy@HBOn4MRf0tMWDwnApneMe@oniL7&destUrl=http://software-files-a.cnet.com/s/software/14/24/84/.../ccsetup505.exe

https://downloader.disk.yandex.ru/disk/290c2eba8f5b652e1e54946f549c9c2c193af960687cc1f333a2f6b5c308a263/56bb416a/.../x-msdownload&fsize=6480808&hid=7e15658178ec359eaa03cfcc1c9de995&media_type=executable&tknv=v2

https://downloader.disk.yandex.ua/disk/e77ce9e6037199e780129f5469590555da5dca3bfe5757779a2bf43f0baf7859/56a800e3/.../x-msdownload&fsize=6480808&hid=7e15658178ec359eaa03cfcc1c9de995&media_type=executable&tknv=v2

https://downloader.disk.yandex.ua/disk/083e371f0edf139527f4db9c822663387682ee65ea0a06fa988a087d173e669b/56a9555b/.../x-msdownload&fsize=6480808&hid=7e15658178ec359eaa03cfcc1c9de995&media_type=executable&tknv=v2

https://downloader.disk.yandex.ru/disk/5fdbf97eb65bcb89c62fa6853ca404db5718c14f3770623fa6aa1d83d04e94f4/56b23562/.../x-msdownload&fsize=6480808&hid=7e15658178ec359eaa03cfcc1c9de995&media_type=executable&tknv=v2

http://files.downloaddd.in.th/ccsetup5.exe

http://www.filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://fs41.filehippo.com/7683/.../ccsetup505.exe

http://download.piriform.com/ccsetup505.exe

http://www.filehippo.com/fr/download/file/.../

http://fs34.filehippo.com/4112/.../ccsetup505.exe

http://www.filehippo.com/download/file/.../

http://software-files-a.cnet.com/s/software/14/24/84/.../ccsetup505.exe

http://www.filehippo.com/download/file/.../

Scan ccsetup505.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.