Gridinsoft Logo
File Icon

The Cleanup.exe (EA Installer Cleanup) File Analysis

Updated 3 days ago
Checked by Malaware Check
Cleanup.exe

Technical Analysis

File Name Cleanup.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-01 06:00:22 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
988,696
File Size (bytes)
2025-06-01
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
689d263e2e1635f85165911a6af27c30
SHA1
74ab3341d8c857682fdb99489fdea8e8fdd5f6ab
SHA256
a712c0ae6e306d1de1c1b5133255223dc21a0fc30d0e4416d91f88d852397c2f
SHA512
17bb63648c21efc93dd922e78b9ea4617b9a0c60e913d9ad2f173e11798071aec04b7ec50b99772737043ea295f93fbb7f3d8093c4a8eab2510c90e790c14a58
ImpHash
4d66f1b3186ff877fbc33e140db8bf64

PE Analysis

Basic Information

▼
Icon
Hash: 5cb974bddc9273b5996ccc742b7474a4
Fuzzy: 6f494f63af1e3a0df9b0035f7ed7d7a6
dHash: f0c086962be6c0f0
Image Base 0x00400000
Entry Point 0x00439774
Compilation Time 2024-07-22 20:43:02
Checksum 0x000fd29b (Actual: 0x000fd29b)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature OK
Imports 9 libraries
KERNEL32, SHELL32, ole32, OLEAUT32, SHLWAPI, msi, USER32, GDI32, ADVAPI32
Exports 0 functions
Resources 63 Resources
Sections 7 Sections

Version Information

▼
CompanyName Electronic Arts, Inc.
FileDescription EA Installer Cleanup
FileVersion 5.07.22.00
LegalCopyright Copyright (C) 2011-2021 Electronic Arts. All rights reserved.
ProductName EA Installer Cleanup
ProductVersion 5.07.22.00
Translation 0x0009 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 432,620 bytes 432,640 bytes 6.65 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 9C27A3D3BC648ABE9757E39E0541A05E
.rdata 0x0006b000 121,014 bytes 121,344 bytes 5.69 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 454D798414D9B5647FEAC4954372C98B
.data 0x00089000 8,496 bytes 4,096 bytes 3.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 73B6A84F2782B569F54F82E6EA9475F5
.gfids 0x0008c000 504 bytes 512 bytes 3.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2F2F75A39BC470144E9CEFEA338E77EA
.tls 0x0008d000 9 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1F354D76203061BFDD5A53DAE48D5435
.rsrc 0x0008e000 400,264 bytes 400,384 bytes 1.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 247B85D8695063805903EACA1514E71F
.reloc 0x000f0000 19,664 bytes 19,968 bytes 6.67 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ BA088FA2BC0A4E00FAA76B5CA15FFA6C
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 63 (398,105 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 381,040 bytes
95.7%
RT_DIALOG 2 376 bytes
0.1%
RT_STRING 52 14,926 bytes
3.7%
RT_GROUP_ICON 1 90 bytes
0%
RT_VERSION 1 736 bytes
0.2%
RT_MANIFEST 1 937 bytes
0.2%

Certificate Chain Analysis

▼
Certificate Information
Product EA Installer Cleanup
Description EA Installer Cleanup
File Version 5.07.22.00
Signing Date 08:43 PM 07/22/2024 (316 days ago)
Verification Status Signed
Signers Electronic Arts, Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Symantec SHA256 TimeStamping Signer - G3; Symantec SHA256 TimeStamping CA; VeriSign Universal Root Certification Authority
Copyright Copyright (C) 2011-2021 Electronic Arts. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Electronic Arts, Inc. #2 Chain
Validity Period: 2023-05-04 00:00:00 → 2026-05-06 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 06 71 35 2D C4 C1 03 B7 0A E7 25 E9 54 48 63 74
Symantec SHA256 TimeStamping CA #3 Chain
Validity Period: 2016-01-12 00:00:00 → 2031-01-11 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B 05 B1 D4 49 68 51 44 F7 C9 89 D2 9C 19 9D 12
Symantec SHA256 TimeStamping Signer - G3 #4 Chain
Validity Period: 2017-12-23 00:00:00 → 2029-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 7B D4 E5 AF BA CC 07 3F A1 01 23 04 22 41 4D 12

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware