Win32/OfferCore.E potentially unwanted information

The Win32/OfferCore.E potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/OfferCore.E potentially unwanted virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Deletes executed files from disk
• Collects information to fingerprint the system

How to determine Win32/OfferCore.E potentially unwanted?

File Info:
name: 732F9AA272EBD89D7995.mlw
path: /opt/CAPEv2/storage/binaries/24ee499cb6c328e7a3d4aa3494ba121b17ba43cdfeded80694a795595c0b9af8
crc32: 5055FE16
md5: 732f9aa272ebd89d79950fb6ffe8f6c7
sha1: 3713a0a8fa35946b7096a9df9b4b39ce5c0aad45
sha256: 24ee499cb6c328e7a3d4aa3494ba121b17ba43cdfeded80694a795595c0b9af8
sha512: 0630dad1ae00c1c3c5c2a724f5779e4ea7d49512f984b4c3909d232c3cb6677ec6ab0eec39067e4593325e7fdbf2902cb69ec36a55cee457855506e0dbe0e392
ssdeep: 24576:j7FUDowAyrTVE3U5FOmHa9mEkQtAcWAR46lNLm+JWSn9jGxcikhybjd0HgpZ5:jBuZrEUM9miAcWH6fLWcObjCHIz
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1D285CE3FB268753EC5AE0B3206739220A97BBE61B91B8C1E47F0580DCF765601E3B655
sha3_384: 2ae9fce9a54eb6f41ac3f21eef8f600a547420f574281bf4d9cbf1ef7a83343bd12e6882ec46a31854dbbe37cadb2ea5
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2022-04-14 16:10:23

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: սTorrent® Classic                                           
FileVersion: 3.6                 
LegalCopyright: ©2022 RainBerry Inc. All Rights Reserved                                                            
OriginalFileName:                                                   
ProductName: սTorrent® Classic                                           
ProductVersion: 3.6                                               
Translation: 0x0000 0x04b0

Win32/OfferCore.E potentially unwanted also known as:

How to remove Win32/OfferCore.E potentially unwanted?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.