Gridinsoft Logo
File Icon

The CCleaner.exe (CCleaner) File Analysis

Technical Analysis

File Name CCleaner.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.207.174
Database Version 2025-02-04 16:01:04 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
39,151,920
File Size (bytes)
2025-02-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
0768c07927b4a1012b85ede04077e99f
SHA1
3d625472bae885f6ffb7a003d20a42ddf42192b8
SHA256
dd7996a5940d141a8f86f54aaeeee7b784be2370ad400f1b8133889ec2398b0e
SHA512
61aa59a8501ee46210bd98e5f6e182fc2626562498381b62285678de11c07c27fbca7a0e368ad12570e2d69cff8bac31c256f533fdb16f70e5368963f1193c65
ImpHash
8fc16b451c39deab7c1aedbc11f66ea5

PE Analysis

Basic Information

Icon
Hash: 3f7f74f79c44aa3ec4119ed34e268e86
Fuzzy: 66ca47e130c9247e0b2546ecdc16b20e
dHash: c2d190b8bc9edccc
Image Base 0x00400000
Entry Point 0x00543f10
Compilation Time 2024-12-04 13:08:23
Checksum 0x0255c7b7 (Actual: 0x0255c7b7)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
PDB Path C:\BUILD\work\8889074bed3874b9\bin\CCleaner\Release Static\x86\CCleaner.pdb
Digital Signature OK
Imports 28 libraries
Exports 4295 functions
Resources 1610 Resources
Sections 6 Sections

Version Information

Comments CCleaner
CompanyName Piriform Software Ltd
FileDescription CCleaner
FileVersion 6.31.0.11415
InternalName ccleaner
LegalCopyright Copyright © 2005-2024 Gen Digital Inc. All rights reserved.
OriginalFilename ccleaner.exe
ProductName CCleaner
ProductVersion 6.31.0.11415
SpecialBuild Spec
ProductId piriform-cc
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 20,194,284 bytes 20,194,304 bytes 6.70 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 16FAF57B6F6223EDC83F6D8916D7CB83
.rdata 0x01344000 5,763,144 bytes 5,763,584 bytes 5.55 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 44F5D1D5DD9FD14CEDC45C0C2C541B40
.data 0x018c4000 4,040,500 bytes 1,796,096 bytes 5.25 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6AA3370EBEC764979016679061C46DD3
.didat 0x01c9f000 524 bytes 1,024 bytes 3.07 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6365DD818E12FC82F84D6BD478D85835
.rsrc 0x01ca0000 10,130,928 bytes 10,130,944 bytes 7.40 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AA1D355E459298E61D309D3914207904
.reloc 0x0264a000 1,253,636 bytes 1,253,888 bytes 6.59 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 53B76B7663245D51F20C3906D042D55B
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 1610 (10,024,555 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 17 34 bytes
0%
BRANDING 1 51,616 bytes
0.5%
CSS 52 333,968 bytes
3.3%
FILE 1 614,400 bytes
6.1%
INI 3 297,549 bytes
3%
PNG 971 5,395,228 bytes
53.8%
TIS 66 541,085 bytes
5.4%
TTF 2 341,620 bytes
3.4%
RT_BITMAP 21 1,445,484 bytes
14.4%
RT_ICON 11 76,851 bytes
0.8%
RT_MENU 9 2,086 bytes
0%
RT_DIALOG 93 58,636 bytes
0.6%
RT_STRING 238 228,264 bytes
2.3%
RT_ACCELERATOR 1 112 bytes
0%
RT_GROUP_ICON 6 190 bytes
0%
RT_VERSION 1 948 bytes
0%
RT_HTML 113 633,835 bytes
6.3%
RT_MANIFEST 1 2,139 bytes
0%
None 3 510 bytes
0%

Certificate Chain Analysis

Certificate Information
Product CCleaner
Description CCleaner
File Version 6.31.0.11415
Original Name ccleaner.exe
Signing Date 01:13 PM 12/04/2024 (223 days ago)
Verification Status Signed
Signers Gen Digital Inc.; DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1; DigiCert Trusted Root G4
Counter Signers Sectigo Public Time Stamping Signer R35; Sectigo Public Time Stamping CA R36; Sectigo Public Time Stamping Root R46
Internal Name ccleaner
Copyright Copyright © 2005-2024 Gen Digital Inc. All rights reserved.
Certificate Chain Summary
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 #1 Primary
Validity Period: 2021-04-29 00:00:00 → 2036-04-28 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 08 AD 40 B2 60 D2 9C 4C 9F 5E CD A9 BD 93 AE D9
Gen Digital Inc. #2 Chain
Validity Period: 2024-05-22 00:00:00 → 2027-05-21 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 A6 1E CF A7 4C C7 B2 CE B4 20 35 C7 72 BE 1D
DigiCert Timestamp 2023 #3 Chain
Validity Period: 2023-07-14 00:00:00 → 2034-10-13 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 05 44 AF F3 94 9D 08 39 A6 BF DB 3F 5F E5 61 16
DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA #4 Chain
Validity Period: 2022-03-23 00:00:00 → 2037-03-22 23:59:59
Signature Algorithm: sha256RSA
Serial Number: 07 36 37 B7 24 54 7C D8 47 AC FD 28 66 2A 5E 5B
DigiCert Trusted Root G4 #5 Chain
Validity Period: 2022-08-01 00:00:00 → 2031-11-09 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 0E 9B 18 8E F9 D0 2D E7 EF DB 50 E2 08 40 18 5A
Sectigo Public Time Stamping Signer R35 #6 Chain
Validity Period: 2024-01-15 00:00:00 → 2035-04-14 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 3A 52 6A 2C 84 CE 55 E6 1D 65 FC CC 12 D8 E9 89
Sectigo Public Time Stamping CA R36 #7 Chain
Validity Period: 2021-03-22 00:00:00 → 2036-03-21 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 7A 23 AE DA 53 69 96 0F 91 C8 3E 5C F4 C7 E3 3F
Sectigo Public Time Stamping Root R46 #8 Chain
Validity Period: 2021-03-22 00:00:00 → 2038-01-18 23:59:59
Signature Algorithm: sha384RSA
Serial Number: 36 C2 B0 BD 7C 1B 3A E7 A3 B3 DD 36 CB C9 75 68

✓ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

OK

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware