Benign Download

GCleaner.html

Loads local script elementReferences multiple public frontend CDN assets
SHA-256b7255e935b8c6acb8eedd2261bcfc119e8c9ef6336f554f0fef2f497b7ae86de
MaleculeO(C)H₂(CmPo)

Evidence

References a cdnjs frontend asset URL lines 6–10
6:27… rsight Malware Samples</title>
7 <link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css">
8 <link rel="stylesheet" href="../styles/main.css">
9 <link rel="icon" href="../assets/icons/favicon.ico" type="image/x-icon">
10 <link rel="apple-touch-icon" sizes= …
English function-word token "and" line 44
44:66… s a Trojan horse. Trojans are a type of malware that disguise themselves as legitimate software, tricking users into downloading and installing them onto their devices. Once installed, GCleaner can wreak havoc on your system, co …
Text names a backdoor or cmd shell line 48
48:179… erabilities in outdated software. Once inside, it establishes a backdoor, allowing remote attackers to gain unauthorized access to your device. Additionally, GCleaner may employ sophisticated techniqu …
English function-word token "the" lines 49–51
49:185… alware. Its functionality can vary depending on the intentions of the cybercriminals behind it.</p>
50 </section>
51 <section class="article- …
Loads local script element lines 69–74
69:13…
70 <p>2025 Cybersight Malware Samples</p>
71 </footer>
72 <script src="../js/script.js"></script>
73 </body>
74</html>

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.