Gridinsoft Logo
File Icon

The pc cleaner installer.exe (PC Cleaner) File Analysis

Updated 1 year ago
Checked by Malware Check
pc cleaner installer.exe

Technical Analysis

File Name pc cleaner installer.exe
File Type
Win32 EXE
Magic Bytes PE32 executable (GUI) Intel 80386, for MS Windows
SSDEEP Hash
196608:dUJl7//t1epn/0ZnbfMSYseYy7c7FsnTum:Sn//tc4bf7YaHunTV
Scanner Version 1.0.172.174
Database Version 2024-04-18 15:00:20 UTC
⚠

Suspicious File Detected

Detected by 5 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
9%
Detection Rate
7,867,760
File Size (bytes)
5/57
Engines Detected
2024-04-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
199e8896119bd3fc3850e9b19eb98ab2
SHA1
b20795b8b98641cd1f3f79767ca2479d81af2a7e
SHA256
36c6dceee32c61fa35e3d2bc6699ca7d6fc0eee903f82876e1e1049d4b52e600
SHA512
c79753ef606c333df5ae974814bec434a0ba872a85cbe98e037700005caa8f3eab616556013099682c4a026f45ca5ceab53ade40f5674b7be73661609c325247
ImpHash
5a594319a0d69dbc452e748bcf05892e

Security Engines with Detections (5 of 57)

Cylance
unsafe Malicious
CrowdStrike
win/grayware_confidence_90% (D) Malicious
DrWeb
Program.Unwanted.5320 Malicious
DeepInstinct
MALICIOUS Malicious
Malwarebytes
PUP.Optional.PCCleaner Malicious
52 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Icon
Hash: a0ef7c81eee20e999575764306184ccf
Fuzzy: 8341e53a6f1047f3c936b4d36dc8f542
dHash: 5050d274ccec82ae
Image Base 0x00400000
Entry Point 0x004b5eec
Compilation Time 2021-06-03 08:09:11
Checksum 0x0078655e (Actual: 0x0078655e)
OS Version 6.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 7 libraries
kernel32, comctl32, version, user32, oleaut32, netapi32, advapi32
Exports 3 functions
Resources 30 Resources
Sections 10 Sections

Version Information

▼
Comments This installation was built with Inno Setup.
CompanyName PC Helpsoft
FileDescription PC Cleaner
FileVersion 9.6.0.4
LegalCopyright PC Helpsoft
OriginalFileName
ProductName PC Cleaner
ProductVersion 9.6.0.4
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 734,748 bytes 735,232 bytes 6.36 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ AD6E46E3A3ACDB533EB6A077F6D065AF
.itext 0x000b5000 5,768 bytes 6,144 bytes 5.97 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D40FC822339D01F2ABCC5493AC101C94
.data 0x000b7000 14,244 bytes 14,336 bytes 5.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 4C195D5591F6D61265DF08A3733DE3A2
.bss 0x000bb000 28,136 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x000c2000 3,894 bytes 4,096 bytes 4.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A73D686F1E8B9BB06EC767721135E397
.didata 0x000c3000 420 bytes 512 bytes 2.76 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 41B8CE23DD243D14BEEBC71771885C89
.edata 0x000c4000 154 bytes 512 bytes 1.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 37C1A5C63717831863E018C0F51DABB7
.tls 0x000c5000 24 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.rdata 0x000c6000 93 bytes 512 bytes 1.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8F2F090ACD9622C88A6A852E72F94E96
.rsrc 0x000c7000 69,120 bytes 69,120 bytes 3.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A3BEC3796AEB3463E250EB0AF3488757

Resource Analysis

▼
Total Resources: 30 (67,411 bytes)
Resource Type Count Total Size Percentage
RT_ICON 13 55,173 bytes
81.8%
RT_STRING 11 8,040 bytes
11.9%
RT_RCDATA 3 768 bytes
1.1%
RT_GROUP_ICON 1 188 bytes
0.3%
RT_VERSION 1 1,412 bytes
2.1%
RT_MANIFEST 1 1,830 bytes
2.7%

Certificate Chain Analysis

▼
Certificate Information
Product PC Cleaner
Description PC Cleaner
File Version 9.6.0.4
Signing Date 09:35 AM 04/03/2024 (452 days ago)
Verification Status Signed
Signers PC HELPSOFT LABS INC.; GlobalSign GCC R45 EV CodeSigning CA 2020; GlobalSign Code Signing Root R45
Counter Signers Globalsign TSA for Advanced - G4 - 202311; GlobalSign Timestamping CA - SHA384 - G4; GlobalSign Root CA - R6
Copyright PC Helpsoft
Certificate Chain Summary
GlobalSign GCC R45 EV CodeSigning CA 2020 #1 Primary
Validity Period: 2020-07-28 00:00:00 → 2030-07-28 00:00:00
Signature Algorithm: sha256RSA
Serial Number: 77 BD 0E 05 B7 59 0B B6 1D 47 61 53 1E 3F 75 ED
PC HELPSOFT LABS INC. #2 Chain
Validity Period: 2022-05-12 21:22:42 → 2024-08-03 18:15:28
Signature Algorithm: sha256RSA
Serial Number: 01 55 B8 40 2D AD B2 C4 9A 38 2A 58
Globalsign TSA for Advanced - G4 - 202311 #3 Chain
Validity Period: 2023-11-02 10:30:02 → 2034-12-04 10:30:02
Signature Algorithm: sha256RSA
Serial Number: 01 19 75 74 71 C9 92 D7 44 DF A5 96 EB B9 70 15
GlobalSign Timestamping CA - SHA384 - G4 #4 Chain
Validity Period: 2018-06-20 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 01 EC 1C 92 40 DE FD 2E 40 5D 7C 47 74
GlobalSign #5 Chain
Validity Period: 2014-12-10 00:00:00 → 2034-12-10 00:00:00
Signature Algorithm: sha384RSA
Serial Number: 45 E6 BB 03 83 33 C3 85 65 48 E6 FF 45 51

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
5 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware