Extracted

• • Target

    e0fa2dad2f6260cd87cffc06b7c5d71eaeb0c32ae9b8504d55e093e3439c0be5

  • Size

    288KB

  • MD5

    3086fc47b4190ec7360d60d6d4ff1bda

  • SHA1

    64372c56e3bc982b11c0dcf42c94ad413bc76ff7

  • SHA256

    e0fa2dad2f6260cd87cffc06b7c5d71eaeb0c32ae9b8504d55e093e3439c0be5

  • SHA512

    8c25a5ce9ec59870b7a423247329c7dadf159216b92bc4e93b1738bdcf71c2529dbb19042098874550c894c86f0c03a60e02b2b482bfdbc802ead3a0cf6608d3

  • SSDEEP

    3072:LOJV53XgJZ6sO6j+znXlgQm5mn+ZQnmP2nbn/s+CO90Y7ysZ1w5FFN+qR8uibMFg:LJ5anvmqn/sWW40N+qPiAFaskIOZ40

  Score

  10^/10

  gcleanerloader

  • GCleaner

    GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    loadergcleaner

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  behavioral1behavioral2