home

cleanvaccinesetup_gene.exe

cleanvaccine installer

DGnetworks

The application cleanvaccinesetup_gene.exe by DGnetworks has been detected as a potentially unwanted program by 14 anti-malware scanners. This is a setup and installation application and has been known to bundle potentially unwanted software.
Publisher:
디지네트웍스  (signed by DGnetworks)

Product:
cleanvaccine installer

Version:
1, 0, 0, 1

MD5:
a6bdfb9e80985be478b95b1540ccafbc

SHA-1:
fc17b33c6d90ab5733cf85f3544c0fe5de91890b

SHA-256:
d35c1919dd7b451fbd7d4aacb2d227c2e4629ee3f20861b98edc0817209399eb

Scanner detections:
14 / 68

Status:
Potentially unwanted

Analysis date:
4/18/2024 9:10:29 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Fakealert.FT
7.11.11.172

Bitdefender
Application.Generic.341499
1.0.20.725

Comodo Security
UnclassifiedMalware
9394

Emsisoft Anti-Malware
Application.SuspectCRC!IK
8.16.05.24.07

ESET NOD32
Win32/Adware.IScan (variant)
10.6298

F-Secure
Application.Generic.341499
11.2016-24-05_3

G Data
Application.Generic.341499
16.5.22

IKARUS anti.virus
Application.SuspectCRC
t3scan.1.1.104.0

McAfee
Generic PUP.x!hm
5600.6390

Microsoft Security Essentials
Rogue:Win32/Onescan
1.163.1557.0

Norman
W32/Suspicious_Gen2.IXMIR
11.20160524

Panda Antivirus
Trj/CI.A
16.05.24.07

SUPERAntiSpyware
Trojan.Agent/Gen-FraudScan[Int]
9124

VIPRE Antivirus
Trojan.Win32.Generic!SB.0
9868

File size:
239.2 KB (244,936 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2009 디지네트웍스 All rights reserved.

Original file name:
cleanvaccinesetup.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\roaming\microsoft\windows\templates\cleanvaccinesetup_gene.exe

Digital Signature
Signed by:
DGnetworks

Authority:
VeriSign, Inc.

Valid from:
1/26/2010 9:00:00 AM

Valid to:
1/27/2011 8:59:59 AM

Subject:
CN=DGnetworks, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=DGnetworks, L=Haeundae-gu, S=Pusan, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6B6B50D52CA11236EB3EF401CFC8ED

File PE Metadata
Compilation timestamp:
2/10/2010 9:41:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
6144:b/VACR+0aTGgHTsJkVT87psrCeyNYvzp8YfJIJ7YLt15:bVAA+0kG4oWT87psrCh4p7Y8D5

Entry address:
0x25AB10

Entry point:
60, BE, 00, 30, 62, 00, 8D, BE, 00, E0, DD, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.8736

Packer / compiler:
UPX 2.90LZMA

Code size:
224 KB (229,376 bytes)

Remove cleanvaccinesetup_gene.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.