home

ccsetup419.exe

CCleaner

Piriform Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from fs41.filehippo.com and multiple other hosts.
Publisher:
Piriform Ltd  (signed and verified)

Product:
CCleaner

Description:
CCleaner Installer

Version:
2.0.0.0

MD5:
5dced6b6a9bf0c12079e8f9513b3c8c1

SHA-1:
a601d7fa1ac943e7c513c18554b4963a7cc30777

SHA-256:
308b352d1dfe5ee5ec52231ea0890ada9870e2a49b78fc55f3b3a804df24615c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/16/2024 2:45:13 AM UTC  (today)

File size:
4.7 MB (4,974,864 bytes)

Copyright:
Copyright © 2005-2014 Piriform Ltd

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\ccsetup419.exe

Digital Signature
Signed by:
Piriform Ltd

Authority:
VeriSign, Inc.

Valid from:
6/25/2013 2:00:00 AM

Valid to:
9/25/2015 1:59:59 AM

Subject:
CN=Piriform Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Piriform Ltd, L=London, S=London, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
785AF6D521F67E132D53385742CE9B35

File PE Metadata
Compilation timestamp:
2/24/2012 8:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:fmHMGRoiz+Nd5XSVUs+JeVcHDQ8LaeIHGkjaZSdHFGPe+3Z6f7aU+k:fdmor9V42XaplsIlFL7a5k

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.9966

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

The file ccsetup419.exe has been discovered within the following program.

MyHarmony  by Logitech Inc.
3% remove it
 
Powered by Should I Remove It?

The file ccsetup419.exe has been seen being distributed by the following 50 URLs.

http://fs41.filehippo.com/2148/.../ccsetup419.exe

http://esd.nzs.com.br/programas/.../878-ccsetup419.exe

http://dla.uloz.to/Ps;Hs;fid=61613537;cid=950309206;rid=1578306989;up=0;uip=217.119.121.229;tm=1416586542;ut=f;aff=uloz.to;did=uloz-to;He;ch=717380945306b0dc576e5f891ef2758a;Pe/.../watch-dogs-cz.exe

http://www.filehippo.com/es/download/file/.../

http://filehippo.com/jp/download/file/.../

http://www.filehippo.com/download/file/.../

http://dla.uloz.to/Ps;Hs;fid=69571623;cid=591736267;rid=1050299631;up=0;uip=91.127.135.50;tm=1469040097;ut=f;aff=uloz.to;did=uloz-to;He;ch=f312c03c05eaf646d0c66661323529f1;Pe/.../adobe-flash-player-13-0-0-214-exe?bD&c=591736267&De

http://www.redpol.mseg.gba.gov.ar/Descargas/.../ccsetup419.exe

&onid=18512&oid=3001-18512_4-10315544&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/maintenance&topicbrcrm=windows software&pid=13863533&mfgid=6300943&merid=6300943&ctype=dm&cval=NONE&devicetype=desktop&pguid=9ae195a1896e6a9c31067a18&viewguid=RNfSDf8tu@YShlkbpf@AZkJKZPMgCqkTWoX6&destUrl=http://software-files-a.cnet.com/s/software/13/86/35/.../ccsetup419.exe

http://global-shared-files-l3.softonic.com/a60/1d7/.../file?nvb=20141114154412&nva=20141115034512&token=091f4b9c8fc755c40face&instance=softonic_nl&filename=ccsetup419.exe

&onid=18512&oid=3001-18512_4-10315544&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/maintenance&topicbrcrm=windows software&pid=13863533&mfgid=6300943&merid=6300943&ctype=dm&cval=NONE&devicetype=desktop&pguid=d2eeca696c312ce96bd858a5&viewguid=RXLfYp8KBWCL3fV21rLiYBVQ7vvZdIM6U@M9&destUrl=http://software-files-a.cnet.com/s/software/13/86/35/.../ccsetup419.exe

http://www.filehippo.com/download/file/.../

&onid=18512&oid=3001-18512_4-10315544&rsid=cbsidownloadcomsite&sl=en&sc=us&topicguid=utilities/maintenance&topicbrcrm=windows software&pid=13863533&mfgid=6300943&merid=6300943&ctype=dm&cval=NONE&devicetype=desktop&pguid=c5e149a5f9730ceb61e990ae&viewguid=RPvwm3552KemTSQ86ySaccDfe3NF0o2cHzcY&destUrl=http://software-files-a.cnet.com/s/software/13/86/35/.../ccsetup419.exe

http://download4.freefiles-5.de/software/s225008/d7376/25008/.../ccsetup419.exe

https://secure.piriform.com/502/cookie?affiliate=32372&redirectto=http://.../ccsetup419.exe&product=70988

http://www.filehippo.com/fr/download/file/.../

http://www.filehippo.com/download/file/.../

http://www.filehippo.com/download/file/.../

http://fs31.filehippo.com/4381/.../ccsetup419.exe

http://fs31.filehippo.com/3130/.../ccsetup419.exe

http://www.filepuma.com/down/1414775083c7268/ccleaner_4.19.4867/.../0/

http://www.filepuma.com/file/1414775083c7268/ccleaner_4.19.4867/.../0/

http://www.filepuma.com/down/1415311215c7268/ccleaner_4.19.4867/.../0/

http://www.filepuma.com/file/1415311215c7268/ccleaner_4.19.4867/.../0/

http://fs41.filehippo.com/4556/.../ccsetup419.exe

http://www.filehippo.com/download/file/.../

http://fs34.filehippo.com/6388/.../ccsetup419.exe

http://www.filehippo.com/download/file/.../

http://fs13.filehippo.com/9675/.../ccsetup419.exe

http://www.filehippo.com/download/file/.../

Latest 30 of 204 download URLs

Scan ccsetup419.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.