home

ccsetup400.exe

CCleaner

Piriform Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is installed with the program CCleaner. The file has been seen being downloaded from fs41.filehippo.com and multiple other hosts.
Publisher:
Piriform Ltd  (signed and verified)

Product:
CCleaner

Description:
CCleaner Installer

Version:
2.0.0.0

MD5:
9941443d6a4c2dae26582731b61444d4

SHA-1:
60c77ff66f63f585fce95c78ff44b513e2aab9f9

SHA-256:
96e24621c261584ccb5db74d9abdd3047dd82a52d59cf19a0ee18d4e6a63a73e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/5/2024 9:36:26 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Google
7.9190

File size:
4.1 MB (4,316,280 bytes)

Copyright:
Copyright © 2005-2013 Piriform Ltd

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\ccsetup400.exe

Digital Signature
Signed by:
Piriform Ltd

Authority:
VeriSign, Inc.

Valid from:
7/6/2011 2:00:00 AM

Valid to:
8/23/2013 1:59:59 AM

Subject:
CN=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Piriform Ltd, L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
741D340793306ACA84FAB3ABBB1567CE

File PE Metadata
Compilation timestamp:
2/24/2012 8:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:AlxZWZ05uT2agMDhQ9Mn+UQepdFY7fsyVZR+B4xUHcx:AoqgT2alhWnuEDsKZ06jx

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file ccsetup400.exe has been discovered within the following programs.

µTorrent  by BitTorrent Inc.
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version.
www.utorrent.com
12% remove it
Apothecarium Renaissance of Evil  by AllSmartGames
Apothecarium Renaissance of Evil is a video game distributed by All Smart Games, a free game distribution platform that provides access through various file hosting services such as FileFactory, Filesonic and deposit files.
allsmartgames.com
10% remove it
CCleaner  by Piriform
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.
www.piriform.com/ccleaner
3% remove it
Defraggler  by Piriform
Defraggler is a defragmentation utility which allows users to defragment individual files on their computer system. Defraggler can defragment individual files, groups of files (in a folder) or an entire disk partition, either by the user's command or automatically on a schedule.
www.piriform.com/defraggler
5% remove it
Empress of the Deep III Legacy of the Phoenix CE  by AllSmartGames
Empress of the Deep III Legacy of the Phoenix is a video game distributed by All Smart Games, a free game distribution platform that provides access through various file hosting services such as FileFactory, Filesonic and deposit files.
all-smart-games.com/empress-of-the-deep-3-legacy-of-the-phoenix-collectors-edition
5% remove it
Internet Download Manager  by Tonec Inc.
Internet Download Manager (also called IDM) is a shareware download manager. It is only available for the Microsoft Windows operating system.
www.internetdownloadmanager.com
30% remove it
Legacy Tales - Mercy of the Gallows Collectors Edition  by AllSmartGames
Legacy Tales - Mercy of the Gallows Collectors Edition is a video game distributed by All Smart Games, a free game distribution website that provides access through a torrent or various file hosting services. The game is not hosted directly through the AllSmartGames.
7% remove it
Portal of Evil - Stolen Runes Collectors Edition  by AllSmartGames
Portal of Evil - Stolen Runes Collectors Edition is a video game distributed by All Smart Games, a free game distribution website that provides access through a torrent or various file hosting services. The game is not hosted directly through the AllSmartGames.
9% remove it
Princess Isabella 3 - The Rise of an Heir CE  by AllSmartGames
Princess Isabella 3 - The Rise of an Heir CE is a video game distributed by All Smart Games, a free game distribution website that provides access through a torrent or various file hosting services. The game is not hosted directly through the AllSmartGames.
11% remove it
SketchUp 8  by Trimble Navigation Limited
Publisher's description - “Redecorate your living room. Invent a new piece of furniture. Model your city for Google Earth. There's no limit to what you can create with SketchUp.”
www.sketchup.com/intl/en/product/gsu.html
9% remove it
 
Latest 20 of 19 programs
Powered by Should I Remove It?

The file ccsetup400.exe has been seen being distributed by the following 50 URLs.

http://fs41.filehippo.com/2950/.../ccsetup400.exe

http://www.filehippo.com/download/file/.../

http://fs34.filehippo.com/6922/.../ccsetup400.exe

http://fs41.filehippo.com/3676/.../ccsetup400.exe

http://www.filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://fs30.filehippo.com/8920/.../ccsetup400.exe

http://fs34.filehippo.com/3825/.../ccsetup400.exe

http://www.filehippo.com/download/file/.../

http://fs32.filehippo.com/4413/.../ccsetup400.exe

http://fs35.filehippo.com/2540/.../ccsetup400.exe

http://fs40.filehippo.com/2333/.../ccsetup400.exe

http://www.go4it.ro/.../10694514

http://fs41.filehippo.com/8882/.../ccsetup400.exe

http://fs32.filehippo.com/9290/.../ccsetup400.exe

http://sd-cf.softonic.com/32000/32736/.../ccsetup400.exe

http://fs41.filehippo.com/6380/.../ccsetup400.exe

http://fs40.filehippo.com/7948/.../ccsetup400.exe

http://www.filehippo.com/download/file/.../

http://fs30.filehippo.com/1005/.../ccsetup400.exe

http://www.filehippo.com/download/file/.../

http://fs41.filehippo.com/9745/.../ccsetup400.exe

http://fs31.filehippo.com/3005/.../ccsetup400.exe

http://fs40.filehippo.com/4971/.../ccsetup400.exe

http://fs40.filehippo.com/9595/.../ccsetup400.exe

http://fs34.filehippo.com/9593/.../ccsetup400.exe

http://www.filehippo.com/download/file/.../

http://fs34.filehippo.com/5586/.../ccsetup400.exe

http://www.filehippo.com/download/file/.../

https://md0svw.bn1.livefilestore.com/.../C Cleaner.exe

Latest 30 of 127 download URLs

Scan ccsetup400.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.