home

alcohol_install.exe

This is a setup and installation application.
Version:
3, 2, 2, 0

MD5:
6f60d786b96f4f5535890874816ec521

SHA-1:
bd6ff22276fda26ea8c7d4568e8bede3d6c198c4

SHA-256:
9456ea14434802823fe9c2348987e21841d22b74054ee319baa045831bb275ee

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/22/2025 10:55:14 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/PECompact
7.1.1

Comodo Security
UnclassifiedMalware
17316

Norman
Suspicious_Gen2.OWXCN
11.20140102

File size:
186.6 KB (191,069 bytes)

File type:
Executable application (Win32 EXE)

Language:
English (United Kingdom)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\alcohol_install.exe

File PE Metadata
Compilation timestamp:
12/23/2006 2:11:38 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
3072:Lt0kV3SVf1rF9m5zjVyF1eIvPnhXTNuIxsagDtYRm/GZRl6vknKfoJ15hXLUMUT3:50gSR1Bk53BIvlQugkm+p6vkn8oX5hXA

Entry address:
0x1000

Entry point:
B8, 68, A5, 47, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, CC, 44, E4, 81, 15, A8, A1, 1F, B8, 7B, C3, C3, 41, 96, F4, 30, B4, F3, 93, 18, 4B, 57, 25, 78, F2, 19, F3, 2E, 07, BB, 59, 80, 6B, 7A, 24, EE, CF, 07, 71, A6, E3, 63, A3, 8C, AD, 2E, EF, 2F, 36, 21, 35, 4C, EB, A6, 34, 07, 4B, 91, F3, E5, 0A, AB, B0, 2B, B5, E5, 7F, 06, 23, 1D, E2, FE, 2B, 20, 41, E3, 55, E1, 64, 98, 0E, 09, F7, DC, 24, 56, A2, 67, DA, 0E, 25, 46, CB...
 
[+]

Entropy:
7.9614

Packer / compiler:
PECompact v2

Code size:
340 KB (348,160 bytes)

Scan alcohol_install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.