Gridinsoft Logo
File Icon

The CCleaner64.exe (CCleaner) File Analysis

Technical Analysis

File Name CCleaner64.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.143.174
Database Version 2023-10-18 19:06:42 UTC

Clean File

No threats detected by our scanner

0%
Detection Rate
42,727,840
File Size (bytes)
2023-10-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
a6ca92e7f184e568fb4d066d7931e142
SHA1
e50b7b8401fac6966c957ded7b99800819e927fa
SHA256
ead16ec1b7b98791c3e7d317b4fe1f2b7661a640b45d7e28a12ecfd0aefe3ccb
SHA512
1462a74cbcb9224a3d236be328b4e477e24a8e1b1044cad86ff53b3760998a82e9525279c4aef0b82a79650d305bb25f7213bf1ff9b5037e002801bafcc69b10
ImpHash
d853b6a0d84e7d117d9ed5d5963132f5

PE Analysis

Basic Information

Icon
Hash: 3f7f74f79c44aa3ec4119ed34e268e86
Fuzzy: 66ca47e130c9247e0b2546ecdc16b20e
dHash: c2d190b8bc9edccc
Image Base 0x140000000
Entry Point 0x1402c9810
Compilation Time 2023-10-10 15:49:20
Checksum 0x028ceb9e (Actual: 0x028c39ed)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path C:\BUILD\work\1878ef5ed829e50b\bin\CCleaner\Release Static\x64\CCleaner64.pdb
Digital Signature Invalid length in certificate table header
Imports 28 libraries
Exports 4289 functions
Resources 1544 Resources
Sections 8 Sections

Digital Signatures

DigiCert Trusted Root G4 DigiCert, Inc. (US)
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 PIRIFORM SOFTWARE LIMITED (GB)

Version Information

Comments CCleaner
CompanyName Piriform Software Ltd
FileDescription CCleaner
FileVersion 6.17.0.10746
InternalName ccleaner
LegalCopyright Copyright © 2005-2023 Piriform Software Ltd
OriginalFilename ccleaner.exe
ProductName CCleaner
ProductVersion 6.17.0.10746
SpecialBuild Spec
ProductId piriform-cc
Translation 0x0409 0x04b0

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 23,011,005 bytes 23,011,328 bytes 6.50 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 5E783DCF17A6F56494D7E4CCA46F8844
.rdata 0x015f3000 6,918,192 bytes 6,918,656 bytes 5.86 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ A953A7E4B6ABD1DF1499AFCDB9C88F39
.data 0x01c8d000 3,958,760 bytes 1,674,240 bytes 4.98 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E701380728E0879A3DE12E8CD182A068
.pdata 0x02054000 892,296 bytes 892,416 bytes 6.83 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ F070E2A1577CC3F4C06108143FB81E70
.didat 0x0212e000 952 bytes 1,024 bytes 3.39 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C3FECD25C16364C483F5C08DAE1E7F2C
_RDATA 0x0212f000 348 bytes 512 bytes 3.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 28E3F7FEF03DC95C9EB7F1CD69410F83
.rsrc 0x02130000 9,949,264 bytes 9,949,696 bytes 7.40 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ C73ABDE93405017E685314441AC8E563
.reloc 0x02aae000 267,848 bytes 268,288 bytes 5.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ F22EFA5533FA806C63D98A80D1E4D83B
Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

Total Resources: 1544 (9,847,872 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 17 34 bytes
0%
BRANDING 1 51,512 bytes
0.5%
CSS 48 300,485 bytes
3.1%
FILE 1 758,272 bytes
7.7%
INI 3 287,437 bytes
2.9%
PNG 934 5,185,397 bytes
52.7%
TIS 59 579,556 bytes
5.9%
TTF 2 341,620 bytes
3.5%
RT_BITMAP 21 1,332,140 bytes
13.5%
RT_ICON 11 76,851 bytes
0.8%
RT_MENU 9 2,086 bytes
0%
RT_DIALOG 90 58,830 bytes
0.6%
RT_STRING 230 218,106 bytes
2.2%
RT_ACCELERATOR 1 112 bytes
0%
RT_GROUP_ICON 6 190 bytes
0%
RT_VERSION 1 916 bytes
0%
RT_HTML 106 652,194 bytes
6.6%
RT_MANIFEST 1 1,624 bytes
0%
None 3 510 bytes
0%

Certificate Chain Analysis

Certificate #1
Subject DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
DigiCert, Inc.
US
Issuer DigiCert Trusted Root G4
Serial Number 11533403529598586876501374841704918745
Certificate #2
Subject PIRIFORM SOFTWARE LIMITED
PIRIFORM SOFTWARE LIMITED
GB
Issuer DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1
Serial Number 7258221896116985768200263569619457979
Certificate Verification Status

Invalid length in certificate table header

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware