home

CLIStart.exe

Catalyst Control Center

Advanced Micro Devices, Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘StartCCC’.
Publisher:
Advanced Micro Devices, Inc.  (signed and verified)

Product:
Catalyst® Control Center

Description:
Catalyst® Control Center Launcher

Version:
3.5.0.0

MD5:
2850768da0c84cc458ca3db33e40ab86

SHA-1:
3eeba4ceb65b1736a63bfe7c849a20614a2a216b

SHA-256:
4f5fbb418d48ee7ebc5fcfb829dddfe4c64514e6e9fc45f26bba2defed91f08a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 9:43:25 AM UTC  (today)

File size:
1.8 MB (1,866,464 bytes)

Product version:
3.5.0.0

Copyright:
© 2008 Advanced Micro Devices, Inc.

Original file name:
CLIStart.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\ati technologies\ati.ace\core-static\x86\clistart.exe

Digital Signature
Signed by:
Advanced Micro Devices, Inc.

Authority:
VeriSign, Inc.

Valid from:
4/3/2013 2:00:00 AM

Valid to:
6/2/2016 1:59:59 AM

Subject:
CN="Advanced Micro Devices, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Advanced Micro Devices, Inc.", L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4CD9E755850C1372B48DC182A7308BAB

File PE Metadata
Compilation timestamp:
3/11/2014 11:31:38 PM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

Entry address:
0x2B3F4

Entry point:
E8, C2, 87, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, D8, DB, 45, 00, E8, E6, 1C, 00, 00, E8, BC, 51, 00, 00, 0F, B7, F0, 6A, 02, E8, 55, 87, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, D3, 06, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
296 KB (303,104 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
StartCCC

Command:
"C:\Program Files\ati technologies\ati.ace\core-static\x86\clistart.exe" msrun


Scan CLIStart.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.