home

alcohol120_trial_2.0.2.5629.exe

Alcohol Soft

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Alcohol Soft  (signed and verified)

MD5:
5bacd318fedc76c5946cad27b47c6967

SHA-1:
5acefcabe9ef231845d366557b4374b32349052a

SHA-256:
0274164203ac9ba6d0e4e6a25ba4a15193ecb8847a14c796037247f503cddc74

Scanner detections:
4 / 68

Status:
Clean  (4 possible false positive detections)

Analysis date:
4/24/2024 2:51:54 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.InstallCore.133
9.0.1.0347

ESET NOD32
Win32/InstallCore.DU
7.9118

Reason Heuristics
PUP.InstallCore (M)
16.4.16.23

SUPERAntiSpyware
PUP.InstallCore/Variant
10911

File size:
617.2 KB (632,024 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\alcohol120_trial_2.0.2.5629.exe

Digital Signature
Signed by:
Alcohol Soft

Authority:
VeriSign, Inc.

Valid from:
10/10/2012 2:00:00 AM

Valid to:
10/14/2013 1:59:59 AM

Subject:
CN=Alcohol Soft, OU=Alcohol Soft Development Team, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alcohol Soft, L=Belfast, S=Antrim, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0EEFAA2A5FC37BE316951AA9F8651331

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:6QSyMJfsGQXGm755eaUhFIz0n9Ur0Qd8uLkr+ENC+J5dT0OBG4fnuW:6QSyMJfs9N7uaeqS9Urp8ujE5ZM4fnn

Entry address:
0x98CC

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, FA, 97, FF, FF, E8, 01, AA, FF, FF, E8, 2C, CC, FF, FF, E8, 73, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 76, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 2C, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D8, BD, 40, 00, E8, AB, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D8, BD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file alcohol120_trial_2.0.2.5629.exe has been seen being distributed by the following 12 URLs.

http://gsf-cf.softonic.com//5ac/efc/.../file?id_file=22703&channel=WEB&instance=softonic_pl&type=PROGRAM&fdh=no&SD_used=0&Expires=1382494091&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=GmEo4VY0w5v2sFgvJ9BcTwYNMmEKqkS1bAAwWWjyIz~9p3svywSGrAnSOfq0~YNi3TI-hadCJosnYhFf9S0gRtA0KblaKc-dlLCgLs1NdCIl~kp94z28-xt-2AbfM0FHWfyY7YP~-4d898qccCD8U3DvpY-4nUushMogiKptSF0_&filename=Alcohol120_trial_2-0-2-5629.exe

http://global-shared-files-l3.softonic.com/5ac/efc/.../file?nvb=20131110215256&nva=20131111095356&token=0851edf2d3926f96724eb&id_file=22703&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=no&SD_used=0&filename=Alcohol120_trial_2-0-2-5629.exe

http://gsf-cf.softonic.com//5ac/efc/.../file?id_file=22703&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1381461704&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=TxJU8WKAlPATUc0YPT3Hyi~p4l58ksI9OnIrjlyJz0sPXxlTrvawXLmyPLl~gkSN89cpE~5iTN--dPQfG7rO7q1DVH5zr3vxwn5ypjQ8EpTGdnycBOM1xzTAsSAJu3kPwpa-sWFdPyK7aKIAzvXs~Dg82qllUnsMr7MUuqbpVy8_&filename=Alcohol120_trial_2-0-2-5629.exe

http://global-shared-files-l3.softonic.com/5ac/efc/.../file?nvb=20131117013556&nva=20131117133656&token=068ba5c686a3379865501&id_file=22703&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=Alcohol120_trial_2-0-2-5629.exe

http://gsf-cf.softonic.com//5ac/efc/.../file?id_file=22703&channel=WEB&instance=softonic_nl&type=PROGRAM&fdh=no&SD_used=0&Expires=1382873603&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=fO819ZJE9EyPRHABwueKnOH1stVCe-BB9dD7Mv00Zse5POkq0NuaIa7epEuWHQJPla9dKCPsSXa0VYu6YNtjp7soYZFU7WWEd6rCUnPm~8cOzkgHp0I7FIqmqla4MlzeVjtwaJrZ~7jQicxfCfH180YyjiVU-w3WKOBZFpGJQ7o_&filename=Alcohol120_trial_2-0-2-5629.exe

http://gsf-cf.softonic.com//5ac/efc/.../file?id_file=22703&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&Expires=1382092535&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Pda-h3U3kf1J8GtwPFozWyalP3BTPj465eR-b4UrCoS7RH0cwtzr71TcSRUePgQn-NNRxeZtEAo0zQeAxrZkCPt~bKJjH80d8XoczFrGlvNnKi9zBpTecaJdPd8a7TfOILCpcRbzyA25m7uciffQ3fyTYnjwRNRO4K901jYEAcs_&filename=Alcohol120_trial_2-0-2-5629.exe

http://alcohol-120.ru.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-enKGOpqSolZc=

http://global-shared-files-l3.softonic.com/5ac/efc/.../file?nvb=20131030141907&nva=20131031022007&token=08471b21e58b107bd271e&id_file=22703&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&filename=Alcohol120_trial_2-0-2-5629.exe

http://global-shared-files-l3.softonic.com/5ac/efc/.../file?nvb=20131031102610&nva=20131031222710&token=0816fadf81dfb1c6fc38a&id_file=22703&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&filename=Alcohol120_trial_2-0-2-5629.exe

http://gsf-cf.softonic.com//5ac/efc/.../file?id_file=22703&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&Expires=1382232746&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=KvV-ZPRxPU3AjF~bF2aXSRQiwcP3KzGmN7owKcw8OEEIl2Br~-4~Jh4AHBF5JOgaQ00b7UbiDsEsixjagRdvspMVZz6ejo4PbGQBILpQtTgkYIEvkwQLD779t9XlxG44eF4MUFMvKeqz2e2Vw68Wa6XutDjE9UPUewdoKFpU0Ns_&filename=Alcohol120_trial_2-0-2-5629.exe

http://alcohol-120.da.softonic.com/.../3tjQyeLV3cjDp-Hw3sCixsiGa5-enKKKop2mmZQ=

http://www.filefacts.com/alcohol-120-quickdownload

Scan alcohol120_trial_2.0.2.5629.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.