InstallCore

Category: Adware and PUAsProtection available since:10 Jun 2015 18:38:42 (GMT)
Type: Unspecified PUALast Updated:26 May 2020 06:02:56 (GMT)

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

"InstallCore" is an installer which bundles legitimate applications with offers for additional third party applications that may be unwanted by the user. Such third party applications are typically installed onto users’ computers by default, but may include an option to ‘opt-out’ during or after the installation process.

Examples of InstallCore include:

Example 1

File Information

Size
1.3M
SHA-1
0c2fde951f342f45f26524d7e4f265a3f9e9b1f3
MD5
757671de7e69a70ceed465c18e4b141c
CRC-32
788373bf
File type
Windows executable
First seen
2015-08-19

Runtime Analysis

Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Liho_is1
    VersionMinor
    0x00000005
Processes Created
  • c:\docume~1\support\locals~1\temp\is-m4ca2.tmp\sample.tmp

Example 2

File Information

Size
1.5M
SHA-1
0c4117eed4115e02489aaf4137a8334cc665c1d3
MD5
3032046f6d7b53fd3a0029073b79f7d6
CRC-32
16266b54
File type
Windows executable
First seen
2017-09-16

Runtime Analysis

Dropped Files
  • c:\Documents and Settings\test user\Local Settings\Temp\is-D630C.tmp\sample.tmp
  • C:\Program Files\Bemobok\Baregofego.bat
  • C:\Program Files\Bemobok\Hahipepe.com
  • C:\Program Files\Bemobok\Cikadus.doc
  • C:\Program Files\Bemobok\Bofecebira.bat
  • C:\Program Files\Bemobok\Naropipada
  • C:\Program Files\Bemobok\Coheheb.pps
  • C:\Program Files\Bemobok\Cokam.tum
  • C:\Program Files\Bemobok\Bofop.com
  • C:\Program Files\Bemobok\Fahebeke.msg
  • C:\Program Files\Bemobok\Godotohosag.html
  • C:\Program Files\Bemobok\Gucogaroh.nu
  • C:\Program Files\Bemobok\Kamake.nun
  • C:\Program Files\Bemobok\Makanukahes.txt
  • C:\Program Files\Bemobok\Kehac.m3u
  • C:\Program Files\Bemobok\Negune.hta
  • C:\Program Files\Bemobok\Pogebabeg.log
  • C:\Program Files\Bemobok\Rokek.pptx
  • C:\Program Files\Bemobok\Sinekik.txt
  • C:\Program Files\Bemobok\Tufiriheka.mp3
  • C:\Program Files\Bemobok\unins000.exe
  • C:\Program Files\Bemobok\unins000.dat
Registry Keys Created
  • HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bemobok_is1
    MinorVersion
    0x00000003
Processes Created
  • c:\docume~1\support\locals~1\temp\is-d630c.tmp\sample.tmp

Example 3

File Information

Size
1.9M
SHA-1
1747de1feba8f693edfa0e7d62cfd5c88663dae7
MD5
6f9cb23921a1366e54662417a40b4709
CRC-32
d4e6123c
File type
Windows executable
First seen
2017-06-06

Runtime Analysis

Dropped Files
  • c:\Documents and Settings\test user\Local Settings\Temp\is-HLBF3.tmp\sample.tmp

download Try Sophos products for free
Download now