What is “Adware:Win32/Stapcore”?

The Adware:Win32/Stapcore is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Adware:Win32/Stapcore virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Reads data out of its own binary image

How to determine Adware:Win32/Stapcore?


File Info:
name: 3021F6A70F7352860EE5.mlw
path: /opt/CAPEv2/storage/binaries/3ecff53e39bab15647e32634af4005416daefeadac4b021377ef478028e2e78a
crc32: DB765E96
md5: 3021f6a70f7352860ee54f37c9c7e2c6
sha1: ee248fb9119f134c5333aaf152480c13e3680978
sha256: 3ecff53e39bab15647e32634af4005416daefeadac4b021377ef478028e2e78a
sha512: bf8e5f713c076dd7f7c22dbc5b9f4d2f0e13c32a96d8262238cc81a14d5e9e3d4b10b121915507dbd570f1a3a31283dbf7c25eea5b19a0ddfcca525d727f62c9
ssdeep: 3072:5bG7N2kDTHUpourHOEcJ7HX38XiWag5pltaGxPzysn+ObD:5bE/HUzuTjMSErl4ArysnN
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A7E3F11022F0C422D5714B3075B57EB79FB29D2296749F831320BB84797EF916A6E2A3
sha3_384: 7f907dfd465eb3cccdcdf33055da2ab134932a4f44c26ba8e6fc4932b3a7fb8328657051ea3e613ea0285c9728fb0a90
ep_bytes: 558bec81ecf40300005356576a205f33
timestamp: 2021-09-25 21:57:46

Version Info:
CompanyName: 1072k
FileDescription: Setup
LegalCopyright: 1072k
ProductName: 1072k
ProductVersion: 1.1.1.1072
Translation: 0x0409 0x04e4

Adware:Win32/Stapcore also known as:

Bkav	W32.Common.AF0C8BB0
Lionic	Adware.Win32.PCAppStore.2!c
Skyhigh	Artemis!PUP
McAfee	Artemis!3021F6A70F73
Cylance	unsafe
Zillya	Adware.PCAppStore.Win32.265
Sangfor	Adware.Win32.Veryfast.Vixh
CrowdStrike	win/grayware_confidence_70% (D)
Alibaba	AdWare:Win32/PCAppStore.add2b2d3
K7GW	Unwanted-Program ( 005aeb241 )
K7AntiVirus	Unwanted-Program ( 005aeb241 )
Symantec	PUA.Gen.2
ESET-NOD32	Win32/Adware.VeryFast.I
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:HEUR:AdWare.Win32.PCAppStore.gen
Avast	NSIS:AdwareX-gen [Adw]
Tencent	Win32.Trojan.FalseSign.Rgil
Sophos	Generic Reputation PUA (PUA)
F-Secure	Adware.ADWARE/Redcap.pgmni
DrWeb	Program.Unwanted.5478
TrendMicro	TROJ_GEN.R002C0DAD24
Avira	ADWARE/Redcap.pgmni
Antiy-AVL	GrayWare[AdWare]/Win32.VeryFast.i
Microsoft	Adware:Win32/Stapcore
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.PCAppStore.gen
GData	Win32.Application.Agent.B6J9OW
Varist	W32/ABRisk.AQFP-7454
Malwarebytes	PUP.Optional.VeryFast.DDS
TrendMicro-HouseCall	TROJ_GEN.R002C0DAD24
SentinelOne	Static AI – Suspicious PE
Fortinet	Riskware/VeryFast
AVG	NSIS:AdwareX-gen [Adw]
DeepInstinct	MALICIOUS

How to remove Adware:Win32/Stapcore?

Adware:Win32/Stapcore removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X