home

ccc.exe

Catalys Control Center: Host application

Andrea Renzo Torello Viera

The executable ccc.exe has been detected as malware by 32 anti-virus scanners.
Publisher:
ATI Technologies Inc.  (signed by Andrea Renzo Torello Viera)

Product:
Catalys Control Center: Host application

Version:
3.5.0.5

MD5:
25652dab2240b9e2b9e81b54c8d6ac05

SHA-1:
a400014d456a69ab4dee6a229a32d87eeedbc5f5

SHA-256:
2562dafb333cac4b1f551b055aae16b7e787bd0a350d4dba2291c23751502db9

Scanner detections:
32 / 68

Status:
Malware

Analysis date:
1/10/2025 4:26:29 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Graftor.217467
63

AegisLab AV Signature
Troj.W32.Agent!c
2.1.4+

AhnLab V3 Security
Backdoor/Win32.Rehai16.N852645405
3.7.5.15

Avira AntiVirus
TR/Crypt.XPACK.Gen2
8.3.3.4

Arcabit
Trojan.Graftor.D3517B
1.0.0.742

avast!
Win32:RCSpy-A [Trj]
2014.9-161202

AVG
PSW.Agent
2017.0.2541

Bitdefender
Gen:Variant.Graftor.217467
1.0.20.1685

Bkav FE
HW32.Packed
1.3.0.8108

Comodo Security
UnclassifiedMalware
25667

Dr.Web
Trojan.Siggen6.43562
9.0.1.0337

Emsisoft Anti-Malware
Gen:Variant.Graftor.217467
8.16.12.02.07

ESET NOD32
Win32/Spy.Agent.ODT
10.14026

Fortinet FortiGate
Riskware/Kryptik.FBLA
12/2/2016

F-Prot
W32/S-09db7b45
v6.4.7.1.166

F-Secure
Gen:Variant.Graftor.217467
11.2016-02-12_6

G Data
Gen:Variant.Graftor.217467
16.12.25

IKARUS anti.virus
Trojan.Win32.Crypt
t3scan.2.1.6.0

K7 AntiVirus
Trojan
13.238.20696

Kaspersky
Trojan.Win32.Agent
14.0.0.-799

McAfee
Artemis!25652DAB2240
5600.6197

Microsoft Security Essentials
Trojan:Win32/Bagsu!rfn
1.1.13000.0

MicroWorld eScan
Gen:Variant.Graftor.217467
17.0.0.1011

NANO AntiVirus
Trojan.Win32.Agent.ebubnw
1.0.38.8984

Panda Antivirus
Trj/Genetic.gen
16.12.02.07

Qihoo 360 Security
Win32/Trojan.Spy.274
1.0.0.1120

Rising Antivirus
Trojan.Generic-m2KX1gf2z0F (Cloud)
23.00.65.161130

Sophos
Troj/FSBSpy-C
4.98

Trend Micro House Call
TROJ_SPNR.06H913
7.2.337

Trend Micro
TROJ_SPNR.06H913
10.465.02

VIPRE Antivirus
Trojan.Win32.Generic
51862

Zillya! Antivirus
Trojan.JaikoCRTD.Win32.2567
2.0.0.3026

File size:
482 KB (493,576 bytes)

Product version:
3.5.0.5

Copyright:
2002-2010

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\roaming\microsoft\windows\start menu\programs\startup\ccc.exe

Digital Signature
Signed by:
Andrea Renzo Torello Viera

Authority:
DigiCert Inc

Valid from:
3/20/2013 8:00:00 AM

Valid to:
3/24/2014 8:00:00 PM

Subject:
CN=Andrea Renzo Torello Viera, O=Andrea Renzo Torello Viera, L=SEVESO, C=IT

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
05D78ECAA3738A087043D6D6F019A3D9

File PE Metadata
Compilation timestamp:
4/7/2013 10:03:01 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:HSemnAV05RxHj3Bc5wUMTkLBCKIiu0FhmxTB7drI/7gkzKTr6f0:tkQ6RxHj3Bc5w5TWBCKIiu6Kv6f0

Entry address:
0x21C8

Entry point:
55, 8B, EC, 81, EC, 20, 01, 00, 00, 8D, 85, 20, FF, FF, FF, 50, E8, BB, FA, FF, FF, 8D, 8D, 20, FF, FF, FF, 51, E8, 23, F8, FF, FF, 89, 45, F4, 8D, 95, 2C, FF, FF, FF, 52, 8B, 45, F4, 50, E8, 27, F8, FF, FF, 89, 45, F8, 8D, 8D, 4C, FF, FF, FF, 51, 8B, 55, F4, 52, E8, 14, F8, FF, FF, 89, 85, 0C, FF, FF, FF, 6A, 1C, 8D, 85, E4, FE, FF, FF, 50, E8, A4, F8, FF, FF, 50, FF, 95, 0C, FF, FF, FF, 8B, 8D, F0, FE, FF, FF, 03, 8D, E4, FE, FF, FF, 89, 4D, FC, 6A, 1C, 8D, 95, E4, FE, FF, FF, 52, 8B, 45, FC, 50, FF, 95...
 
[+]

Entropy:
5.8208

Developed / compiled with:
Microsoft Visual C++

Code size:
169.5 KB (173,568 bytes)

User Start Menu Item
Name:
CCC.exe


Remove ccc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.