ccleaner_service.exe
by Gen Digital Inc.
Sources: observed in the EchoTrail lab on Windows 11.
Summary
CCleaner Service (CCleaner, Gen Digital Inc.)
ccleaner_service.exe is not in the 2025 snapshot. It was observed in EchoTrail's behavior lab on Windows 11 24H2 on 2026-09-15 installed from winget package Piriform.CCleaner.
Get this in your tools
The same record for ccleaner_service.exe, by REST or as an MCP tool. Free key, no card.
curl -H "Authorization: Bearer $ECHOTRAIL_KEY" \
https://api.echotrail.io/v1/process/ccleaner_service.exeFree returns the summary. Team returns the full record you see on this page. Endpoint docs
n/a
most commonly executed Windows program
n/a
observed endpoint executions
Behavior
Top Paths
- C:\Program Files\Piriform\CCleaner 7
Top Hashes (SHA256)
- 0560d46c9096fd2b9cef85c9279fe2cf0c9acbcb8f781f0ee9d769e11cc5136c
Process Ancestry
Top Grandparents
Top Parents
Top Children
Lab record
- Installed from
- winget Piriform.CCleaner 7.11.1509.1940
- Publisher
- Gen Digital Inc.
- Persistence
- 1 service
- Network
- 6 destinations
- Command lines
- 2 patterns (3 launches)
- DLL loads
- 133 patterns (314 loads)
- Registry writes
- 78 patterns (2,239 writes)
- File writes
- 103 patterns (159 writes)
- HTTP requests
- 1 pattern (2 requests)
- TLS connections
- 3 patterns (13 handshakes)
- Named pipes
- 1 pattern (2 events)
- Process access
- 5 patterns (46 events)
- Driver loads
- 0 patterns (0 loads)
- PowerShell blocks
- 0 patterns (0 blocks)
- Remote threads
- 0 patterns (0 events)
- Audit events
- 0 patterns (0 events)
Full record on Team.
Ask Rocky about ccleaner_service.exe
Rocky is the free chat demo. It answers from this same dataset, no account needed.
This page is the Team-tier API record for ccleaner_service.exe. The free tier returns the summary, 500 lookups a month. Or ask Rocky.