Win32/InstallCore.Gen.F potentially unwanted malicious file

The Win32/InstallCore.Gen.F potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/InstallCore.Gen.F potentially unwanted virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/InstallCore.Gen.F potentially unwanted?


File Info:
crc32: 961F8B80
md5: e98ba0a5fe64f371ec9c2f12c17a419f
name: E98BA0A5FE64F371EC9C2F12C17A419F.mlw
sha1: a0e1e104ac79dbc5e2577d71ad87d795a8fe0830
sha256: 68106f13dcceed3e83a4357d27fabcbf2c66dcbc18eda06ce123c3417cd6a898
sha512: 6402b1f7fc644982c3cd7fea0b63a81ff96272d90b3fd759549f403aa1a71e138c2360cc6d2bca5dc9ddc94fbc5742777859547affc5b61b9d624072bc1e9cc6
ssdeep: 24576:I0GQRH/GnOEUS3Nd68iGKz8CjfTL1ifVjTaGToSxl7jCsHowhsi+iMuGd3hpkJs6:6qunvUSDiGKzj2JT7l7Ws9hsaudsU8f
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright: Bipiraheh                                                                                           
FileVersion:                     
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: Kebelasel                                                   
ProductVersion: 4.4                                               
FileDescription: Kebelasel Setup                                             
Translation: 0x0000 0x04b0

Win32/InstallCore.Gen.F potentially unwanted also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Adware ( 0055ed841 )
Lionic	Riskware.Win32.Generic.1!c
Elastic	malicious (high confidence)
Cylance	Unsafe
Sangfor	Riskware.Win32.Wacapew.C
CrowdStrike	win/malicious_confidence_100% (D)
K7GW	Adware ( 0055ed841 )
Symantec	PUA.InstallCore!g10
ESET-NOD32	Win32/InstallCore.Gen.F potentially unwanted
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:AdWare.Win32.DealPly.fdkxe
Alibaba	AdWare:Win32/InstallCore.30676dc5
Sophos	Mal/EncPk-NST
McAfee-GW-Edition	BehavesLike.Win32.InstallCore.tc
FireEye	Generic.mg.e98ba0a5fe64f371
SentinelOne	Static AI – Suspicious PE
Avira	TR/Dropper.Gen
Antiy-AVL	Trojan/Generic.ASMalwS.2FD746E
McAfee	Artemis!E98BA0A5FE64
VBA32	BScope.Trojan.Wacatac
Malwarebytes	Adware.InstallCore
Fortinet	W32/EncPk.NST!tr
Paloalto	generic.ml

How to remove Win32/InstallCore.Gen.F potentially unwanted?

Win32/InstallCore.Gen.F potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X