Online Virus Checker | v.1.0.201.174 |
DB Version: | 2024-12-30 14:00:46 |
InstallCore is a framework used by software developers to distribute their applications. It is not inherently malicious, but it is often used with potentially unwanted programs (PUPs) and adware for hidden bundling software with additional tools without clear user consent.
File | canon-ij-network-scanner-selector-ex_Lh2SE-1.exe |
Checked | 2024-12-30 12:18:12 |
MD5 | 7aade532197cdff1d33652e5c585d370 |
SHA1 | f0f494b1a4ed401b266cd7ada27fdba8b60a22f6 |
SHA256 | 89e8f0ae802c836440c43803a48fea77a0db7554b071df5cfcaca6d80d126008 |
SHA512 | 1594c94c7a9ac348de804c655c37a29a634d600e1b7ba42a5742b7f96b229c20ce51beaf5b099d315613711c386be7cd7001d50296e6f3550d141154c2ad8f97 |
Imphash | 40ab50289f7ef5fae60801f88d4541fc |
File Size | 2642848 bytes |
Gridinsoft has the capability to identify and eliminate Adware.Win32.InstallCore.vl!c without requiring further user intervention.
Comments | This installation was built with Inno Setup. |
CompanyName | |
FileDescription | UpdateStar |
FileVersion | 2.4.0.9031 |
LegalCopyright | |
OriginalFileName | |
ProductName | UpdateStar |
ProductVersion | 2.4.0.9031 |
Translation | 0x0000 0x04b0 |
a0ef7c81eee20e999575764306184ccf 8341e53a6f1047f3c936b4d36dc8f542 5050d274ccec82ae |
|
Image Base: | 0x00400000 |
Entry Point: | 0x004a83bc |
Compilation: | 2024-07-12 07:26:53 |
Checksum: | 0x0028a908 (Actual: 0x0028a908) |
OS Version: | 6.1 |
PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
Sign: | OK |
Sections: | 11 |
Imports: | kernel32, comctl32, user32, oleaut32, advapi32, |
Exports: | 2 |
Resources: | 30 |
Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
---|---|---|---|---|---|
.text | 0x00001000 | 0x000a568c | 0x000a5800 | b889d302f6fc48a904de33d8d947ae80 | 6.38 |
.itext | 0x000a7000 | 0x00001b64 | 0x00001c00 | 588dd0a8ab499300d3701cbd11b017d9 | 6.11 |
.data | 0x000a9000 | 0x00003838 | 0x00003a00 | 5c0c76e77aef52ebc6702430837ccb6e | 4.96 |
.bss | 0x000ad000 | 0x00007258 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
.idata | 0x000b5000 | 0x00000fec | 0x00001000 | 627340dff539ef99048969aa4824fb2d | 5.02 |
.didata | 0x000b6000 | 0x000001a4 | 0x00000200 | fd11c1109737963cc6cb7258063abfd6 | 2.73 |
.edata | 0x000b7000 | 0x00000071 | 0x00000200 | 7de8ca0c7a61668a728fd3a88dc0942d | 1.31 |
.tls | 0x000b8000 | 0x00000018 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 |
.rdata | 0x000b9000 | 0x0000005d | 0x00000200 | d84006640084dc9f74a07c2ff9c7d656 | 1.39 |
.reloc | 0x000ba000 | 0x00010fa8 | 0x00011000 | a85fda2741bd9417695daa5fc5a9d7a5 | 6.71 |
.rsrc | 0x000cb000 | 0x00011000 | 0x00011000 | 011bc993893f1aec0735e443b4f5c6bf | 3.72 |