Gridinsoft Logo
File Icon

The CCleaner64.exe (CCleaner) File Analysis

Updated 2 days ago
Checked by Malaware Check
CCleaner64.exe

Technical Analysis

File Name CCleaner64.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-05-29 17:00:19 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
45,715,776
File Size (bytes)
2025-05-29
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
99019788785b4ab93998c0b7c4f84ef8
SHA1
1ffc40ffc48422b82f8357811e316da68df6e0ed
SHA256
be866949bd4c7792f35d89d3e4ef7cab09c33d0ce1d1a1a957291e2d902012e1
SHA512
a6ae1eba459649e92659a8470789d51d4bf05bde612340155c9067d07937ce8b68355a7c65ea477d693db4cf1d672aeb565db210fcec9d91fca259c695c82370
ImpHash
3a186998455c5fb50a3faddb1196af2d

PE Analysis

Basic Information

▼
Icon
Hash: 3f7f74f79c44aa3ec4119ed34e268e86
Fuzzy: 66ca47e130c9247e0b2546ecdc16b20e
dHash: c2d190b8bc9edccc
Image Base 0x140000000
Entry Point 0x14033af30
Compilation Time 2025-05-21 18:38:23
Checksum 0x02ba54d2 (Actual: 0x02ba24bc)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\BUILD\work\8889074bed3874b9\bin\CCleaner\Release Static\x64\CCleaner64.pdb
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 27 libraries
Exports 4289 functions
Resources 1620 Resources
Sections 7 Sections

Version Information

▼
Comments CCleaner
CompanyName Gen Digital Inc.
FileDescription CCleaner
FileVersion 6.36.0.11508
InternalName ccleaner
LegalCopyright Copyright © 2005-2025 Gen Digital Inc. All rights reserved.
OriginalFilename ccleaner.exe
ProductName CCleaner
ProductVersion 6.36.0.11508
SpecialBuild Spec
ProductId piriform-cc
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 24,625,251 bytes 24,625,664 bytes 6.45 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D0B55EAD1C60C9B145971E2DAE038659
.rdata 0x0177e000 7,445,338 bytes 7,445,504 bytes 5.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AB5CF9CB5F6141A9C543E6F0D531A7B1
.data 0x01e98000 4,310,916 bytes 1,994,752 bytes 5.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9F26A741A7963DE55D4FD083905322F0
.pdata 0x022b5000 973,704 bytes 973,824 bytes 6.83 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 22DCC19BAF6A4696A0548D0742301517
.didat 0x023a3000 1,024 bytes 1,024 bytes 3.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9033F1AF481BDACA33EBB92F0BBBEB32
.rsrc 0x023a4000 10,377,224 bytes 10,377,728 bytes 7.40 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3A485B861F2D25B7D816B1F4FB13864D
.reloc 0x02d8a000 285,056 bytes 285,184 bytes 5.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 954658D95634EDD52CD1FBAC0F1BF5A8
Entropy Analysis Alert

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 1620 (10,270,221 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 17 34 bytes
0%
BRANDING 1 52,016 bytes
0.5%
CSS 52 335,096 bytes
3.3%
FILE 1 758,272 bytes
7.4%
INI 3 299,393 bytes
2.9%
PNG 978 5,480,781 bytes
53.4%
TIS 66 543,763 bytes
5.3%
TTF 2 341,620 bytes
3.3%
RT_BITMAP 21 1,445,484 bytes
14.1%
RT_ICON 11 76,851 bytes
0.7%
RT_MENU 9 2,086 bytes
0%
RT_DIALOG 93 58,700 bytes
0.6%
RT_STRING 240 230,230 bytes
2.2%
RT_ACCELERATOR 1 112 bytes
0%
RT_GROUP_ICON 6 190 bytes
0%
RT_VERSION 1 940 bytes
0%
RT_HTML 114 642,519 bytes
6.3%
RT_MANIFEST 1 1,624 bytes
0%
None 3 510 bytes
0%

Certificate Chain Analysis

▼
Certificate Information
Product CCleaner
Description CCleaner
File Version 6.36.0.11508
Original Name ccleaner.exe
Signing Date 06:39 PM 05/21/2025 (10 days ago)
Verification Status The digital signature of the object did not verify.
Signers Gen Digital Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Sectigo Public Time Stamping Signer R36; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46
Internal Name ccleaner
Copyright Copyright © 2005-2025 Gen Digital Inc. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Gen Digital Inc. #2 Chain
Validity Period: 2024-05-22 00:00:00 → 2027-05-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 A6 1E CF A7 4C C7 B2 CE B4 20 35 C7 72 BE 1D
Sectigo Public Time Stamping Signer R35 #3 Chain
Validity Period: 2024-01-15 00:00:00 → 2035-04-14 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89
Sectigo Public Time Stamping CA R36 #4 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Root R46 #5 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68
Sectigo Public Time Stamping Signer R36 #6 Chain
Validity Period: 2025-03-27 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: A4 29 3B 6E 1E DD D7 A7 34 08 87 AD 7A 4E B7 24

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware