home

installer-aobe.zip

The file installer-aobe.zip has been detected as a potentially unwanted program by 3 anti-malware scanners. It uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions. The file has been seen being downloaded from cds.h4y2e8a2.hwcdn.net.
MD5:
6e746b3d52bd91b3cadd01f95aa08a79

SHA-1:
26886041305524526b09474e790ec80c68e0d37a

SHA-256:
d6c6f317abfdfbc5a99a5c0a2b34b0dbe538db252b347a2cd49b378caceb1c31

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
5/1/2024 5:52:25 PM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.Win32.InstallCore
4.0.3.151025

ESET NOD32
Win32/InstallCore.ACZ potentially unwanted (variant)
9.12460

Malwarebytes
PUP.Optional.InstallCore
v2015.10.25.05

File size:
2.6 MB (2,770,734 bytes)

Common path:
C:\users\{user}\downloads\installer-aobe.zip

The file installer-aobe.zip has been seen being distributed by the following URL.

http://cds.h4y2e8a2.hwcdn.net/.../installer.zip

Remove installer-aobe.zip - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.