Gridinsoft Logo
File Icon

The CCleaner.exe (CCleaner) File Analysis

Updated 2 days ago
Checked by Malaware Check
CCleaner.exe

Technical Analysis

File Name CCleaner.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-29 17:00:19 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
39,558,464
File Size (bytes)
2025-05-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
b91588d21ec83c39366a3a30ceab26cb
SHA1
55c7bb177c4ea848dd0dd9063d5f526e473ae40c
SHA256
171e6fc48eedd8a0abcd5c28c4d4387764a7bc6c9e9eab002a9ceecd3618c8c0
SHA512
e7edfc034e64e75e7432c7f9d099b95ab278bbb96b794e43961149b22aff9f20e3f8f6e03d1a17517cdd49e9819883e353e4381d571dc2917a092632b8a76014
ImpHash
81796e775b3a85bd066ad43325a44894

PE Analysis

Basic Information

▼
Icon
Hash: 3f7f74f79c44aa3ec4119ed34e268e86
Fuzzy: 66ca47e130c9247e0b2546ecdc16b20e
dHash: c2d190b8bc9edccc
Image Base 0x00400000
Entry Point 0x00549e40
Compilation Time 2025-05-21 18:36:09
Checksum 0x025c0ea4 (Actual: 0x025c0ea4)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\BUILD\work\8889074bed3874b9\bin\CCleaner\Release Static\x86\CCleaner.pdb
Digital Signature OK
Imports 27 libraries
Exports 4295 functions
Resources 1620 Resources
Sections 6 Sections

Version Information

▼
Comments CCleaner
CompanyName Gen Digital Inc.
FileDescription CCleaner
FileVersion 6.36.0.11508
InternalName ccleaner
LegalCopyright Copyright © 2005-2025 Gen Digital Inc. All rights reserved.
OriginalFilename ccleaner.exe
ProductName CCleaner
ProductVersion 6.36.0.11508
SpecialBuild Spec
ProductId piriform-cc
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 20,411,548 bytes 20,411,904 bytes 6.71 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7828534545A47A49AD19CCCC926BBEFD
.rdata 0x01379000 5,797,892 bytes 5,798,400 bytes 5.54 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FD1B0F5070AEA157D986BC7B534A0CAE
.data 0x01901000 4,090,904 bytes 1,833,472 bytes 5.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9C0C8B6CC2320F0A48A0CC2E2A2971FA
.didat 0x01ce8000 516 bytes 1,024 bytes 3.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D6B344C2AB641D097C483A6575CC6CCD
.rsrc 0x01ce9000 10,233,872 bytes 10,234,368 bytes 7.41 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 87B6FC2AA59F6A311241EAF8E3469C77
.reloc 0x026ac000 1,266,936 bytes 1,267,200 bytes 6.59 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A6749D674C65733E91CF8CA6E534B08E
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 1620 (10,126,864 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 17 34 bytes
0%
BRANDING 1 52,016 bytes
0.5%
CSS 52 335,096 bytes
3.3%
FILE 1 614,400 bytes
6.1%
INI 3 299,393 bytes
3%
PNG 978 5,480,781 bytes
54.1%
TIS 66 543,763 bytes
5.4%
TTF 2 341,620 bytes
3.4%
RT_BITMAP 21 1,445,484 bytes
14.3%
RT_ICON 11 76,851 bytes
0.8%
RT_MENU 9 2,086 bytes
0%
RT_DIALOG 93 58,700 bytes
0.6%
RT_STRING 240 230,230 bytes
2.3%
RT_ACCELERATOR 1 112 bytes
0%
RT_GROUP_ICON 6 190 bytes
0%
RT_VERSION 1 940 bytes
0%
RT_HTML 114 642,519 bytes
6.3%
RT_MANIFEST 1 2,139 bytes
0%
None 3 510 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product CCleaner
Description CCleaner
File Version 6.36.0.11508
Original Name ccleaner.exe
Signing Date 06:39 PM 05/21/2025 (10 days ago)
Verification Status Signed
Signers Gen Digital Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Sectigo Public Time Stamping Signer R36; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46
Internal Name ccleaner
Copyright Copyright © 2005-2025 Gen Digital Inc. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Gen Digital Inc. #2 Chain
Validity Period: 2024-05-22 00:00:00 → 2027-05-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 A6 1E CF A7 4C C7 B2 CE B4 20 35 C7 72 BE 1D
Sectigo Public Time Stamping Signer R35 #3 Chain
Validity Period: 2024-01-15 00:00:00 → 2035-04-14 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89
Sectigo Public Time Stamping CA R36 #4 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Root R46 #5 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68
Sectigo Public Time Stamping Signer R36 #6 Chain
Validity Period: 2025-03-27 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: A4 29 3B 6E 1E DD D7 A7 34 08 87 AD 7A 4E B7 24

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware