home

ccsetup225.exe

CCleaner

Piriform Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is installed with multiple programs including CCleaner. The file has been seen being downloaded from s10557.chomikuj.pl and multiple other hosts.
Publisher:
Piriform Ltd  (signed and verified)

Product:
CCleaner

Description:
CCleaner Installer

Version:
2.0.0.0

MD5:
f5e50c87f6a8d9521013c6626d30f984

SHA-1:
dfc2952daed786a4290234ff4d77152f202d803b

SHA-256:
fea5e4024067166cb5ea5ae98e250214d325582ba4ca4d7d764e023539dc247b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 4:11:48 PM UTC  (today)

File size:
3.2 MB (3,310,608 bytes)

Copyright:
©2005-2009 Piriform Ltd

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\ccsetup225.exe

Digital Signature
Signed by:
Piriform Ltd

Authority:
VeriSign, Inc.

Valid from:
7/28/2009 2:00:00 AM

Valid to:
8/24/2011 1:59:59 AM

Subject:
CN=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Piriform Ltd, L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2F5A8C1E932EDBFD4893916FC880DFE7

File PE Metadata
Compilation timestamp:
6/6/2009 11:41:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:fNeGlFYJF7WHwraHTa/mN4xIRc2bo/T+g:ZEMQyTtux47bUf

Entry address:
0x323C

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file ccsetup225.exe has been discovered within the following programs.

AnyDVD  by SlySoft Inc.
Publisher's description - “AnyDVD works in the background to automatically and transparently enable read access of the contents of a movie DVD as soon as it's inserted into the drive.”
www.slysoft.com/en/anydvd.html
9% remove it
CCleaner  by Piriform
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.
www.piriform.com/ccleaner
3% remove it
Toolwiz Time Freeze 2015  by ToolWiz
www.Toolwiz.com
About 5% of users remove it
 
Powered by Should I Remove It?

The file ccsetup225.exe has been seen being distributed by the following 4 URLs.

http://s10557.chomikuj.pl/File.aspx?e=ESVED_iC5HCI2w7ts6BtAqsXGeXXns0O1F3nL7RBao3H7sCHjzRhxuwV_CC_r3tRHJU0RhxdiRad7BXIVBoDvd_AJk6cukbYfb1PIF-Eqg5RII-ARTOY6mo-6vfaHqDqHQ-jgv22y1xYhA7Gjir3Ag&pv=2

http://www.filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://fs3.filehippo.com/3516/.../ccsetup225.exe

Scan ccsetup225.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.