home

TTCleanStates.exe

TTCleanStates

INTUIT INC.

Publisher:
Intuit  (signed by INTUIT INC.)

Product:
TTCleanStates

Version:
1.0.0.0

MD5:
6ac88d525d1eb2ea00363aeac541b463

SHA-1:
f1cb2686c1ee64932924e8bf2ba6304835deab1d

SHA-256:
42561e46e7c6c5fa890352897670d9220ba66e8a779facef8bf2cc010d6e8f44

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/20/2025 12:13:02 PM UTC  (today)

File size:
119.9 KB (122,824 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Intuit 2015

Original file name:
TTCleanStates.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ttcleanstates.exe

Digital Signature
Signed by:
INTUIT INC.

Authority:
Symantec Corporation

Valid from:
9/11/2014 8:00:00 PM

Valid to:
9/12/2016 7:59:59 PM

Subject:
CN=INTUIT INC., OU=CTG, O=INTUIT INC., L=Mountain View, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
4F199D1DD52B5CEA70DBE45E878BC8CD

File PE Metadata
Compilation timestamp:
2/4/2015 7:29:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:2HXwIOoV3XW7K/P7qLPGNwIOoV3XW7K/p7M8:2HXyoh137fyoh1B7N

Entry address:
0x1270E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3476

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
66 KB (67,584 bytes)

The file TTCleanStates.exe has been seen being distributed by the following URL.

http://patchdelivery.turbotax.intuit.com/TTCleanStates.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.