» cleanup.exe
Overview
Analysis
File Details
Downloads (5)

cleanup.exe

Windows CleanUp!

The Strangely Green Chicken Company

File name:

cleanup.exe

Publisher:

The Strangely Green Chicken Company

Product:

Windows CleanUp!

Description:

Removes temporary files. Helps protect privacy! :-)

Version:

2.0.0

MD5:

55dbe952ba9f36bd3c04be50e3b27b08

SHA-1:

ea6c8ed8de2c331bc9a46c1edec3586b2a94dcac

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/19/2024 12:35:42 AM UTC (today)

File size:

279.5 KB (286,208 bytes)

Product version:

2.0.0

Original file name:

cleanup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\cleanup!\cleanup.exe

File PE Metadata

Compilation timestamp:

12/25/1998 8:08:43 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

5.10

CTPH (ssdeep):

3072:I86bAkDwltXulfWu3jaa7eY0sIezHpu9iRXXUYadie2KCLBCYKFgBYrfOYHV/yeB:EbO+FJ3xaY0sIihpW2rLFwvyt4J

Entry address:

0x8370

Entry point:

55, 8B, EC, 6A, FF, 68, 30, D0, 42, 00, 68, E8, D9, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, C4, A8, 53, 56, 57, 89, 65, E8, FF, 15, B8, A1, 42, 00, 33, D2, 8A, D4, 89, 15, 18, B6, 43, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 14, B6, 43, 00, C1, E1, 08, 03, CA, 89, 0D, 10, B6, 43, 00, C1, E8, 10, A3, 0C, B6, 43, 00, E8, D4, 55, 00, 00, 85, C0, 75, 0A, 6A, 1C, E8, 79, 01, 00, 00, 83, C4, 04, E8, E1, 3C, 00, 00, 85, C0, 75, 0A, 6A, 10, E8, 66, 01, 00, 00, 83, C4, 04, C7, 45, FC... 
[+]

Entropy:

6.3793

Developed / compiled with:

Microsoft Visual C++

Code size:

160.5 KB (164,352 bytes)

The file cleanup.exe has been seen being distributed by the following 5 URLs.

https://doc-0k-c8-docs.googleusercontent.com/docs/securesc/3rkmdfmu1798a892s0bpubl0rs5a8e5j/i34cusat3hp0pqituectl942f83ga8m3/1409277600000/.../05194844556234608776/0B3F03kU83t_0VEZzLV93V0F2a0k?e=download&h=16653014193614665626&nonce=0lbrmeea5r534&user=05194844556234608776&hash=t75ougnfn6c55jbfjistm72iaqb2f7vv

https://docs.google.com/nonceSigner?nonce=0lbrmeea5r534&continue=https://doc-0k-c8-docs.googleusercontent.com/docs/securesc/3rkmdfmu1798a892s0bpubl0rs5a8e5j/i34cusat3hp0pqituectl942f83ga8m3/1409277600000/.../05194844556234608776/0B3F03kU83t_0VEZzLV93V0F2a0k?e=download&h=16653014193614665626&hash=gn52loq2jffb5iqq2k2g6lno98l1ksc1

https://drive.google.com/uc?id=0B3F03kU83t_0VEZzLV93V0F2a0k&export=download

http://www.freebies4ya.com/members/.../CLEANUP.EXE

Scan cleanup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.