Extracted

• • Target

    2933a006093f683005d6a063b150494eb9d81cd4511739bd21bf20e7f2d80002

  • Size

    301KB

  • MD5

    e426711f2baaaa5ac3c22e490361c391

  • SHA1

    b1dbc44255a68a889bf3a28f3b7925127886871f

  • SHA256

    2933a006093f683005d6a063b150494eb9d81cd4511739bd21bf20e7f2d80002

  • SHA512

    bb4506f8f67935315324333174b6fb945178376935947883ccd4668242fa7cd0e5058567c8df2ab460465ee88c54f0a0f3a833723cc5982f6db3a2f27878c7b8

  • SSDEEP

    3072:EzKIOGJfB4wfLLvY+hdqPXWZsMieG82Pa4oMT76ckpiqewdX7C/d8Seo6pHAMyq/:AKqxnvYzusMrG7PehpH19Seo6pHAMyW

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2