home

downloader_for_alcohol120_trial_2.0.3.8806.exe

Nore

The application downloader_for_alcohol120_trial_2.0.3.8806.exe, “Nore Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Nore

Description:
Nore Setup

Version:
4.0.4.8

MD5:
fc0aa7dfad3917fe5758030e9bcdf7a0

SHA-1:
0d2ac860cb64729c5c549221fd54e488aa6e1a37

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
5/16/2024 12:04:14 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RE11 (M)
16.4.7.11

File size:
1 MB (1,067,249 bytes)

Product version:
1.3.1

Copyright:
Soft Web

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\Documents and Settings\{user}\My documents\downloads\downloader_for_alcohol120_trial_2.0.3.8806.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:haQ0/u7klqW6KY4rOt8wtTt3Sd7ElBGLcuvMts:hqiyqiYHtnRm7ElBe9vM+

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file downloader_for_alcohol120_trial_2.0.3.8806.exe has been seen being distributed by the following 15 URLs.

http://www.firefilesdata.com/.../C&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

http://www.firefilesdata.com/.../UWqWrgqORg9z8X0NETkh8wAN1oLaQ1vAY14g9FyXU8C5aQVgoSNF3RBkh53GY1aV25geDvONEvVTrkD qv6uKXfjkW16&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

http://www.firefilesdata.com/c?x=EvQ7iqboWckVoaD8OowTeUhzaq1pXVmqmaADVYX0eoE=&c=1yi86SAlOg1GfTGNaTq4esI6w9l9J3fyugyuPA8Plf68wHWfpGCPLXQweCjaSNAQ1RRS9Pa5 z/oycNJJ9FJttG ZAcYWZ8BlgLJl09ag0ghrkP2Ca6kayoBcd/.../YhF7W&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

http://www.firefilesdata.com/WVl6OTRQVzlaUlhjNFpVNHpkMFVsTWtaaFZFVkliWGRoVVNVeVJuQTJSbk5IVldvd2NVeFNUV3hHYkhWYVFrbFlkR2R6SlRORUptTTlibHBJTTAwMlVVRlVlVmQyVkdaWVRYWmlKVEpHUTNCUFJHeDBTbFJ4VGtZeFlsbFFRV1oyZFVSb1ZXaHVSME52Ulc1SE5uSmlNMmR4ZEZGUGExUXdSMWRDY1ZKMWJFeFJXbVI2Uld4eEpUSkNaVXhLZDFRbE1rSnVlVXREVFVWNmVFWXpiVkl3T0VkM2NGRk9TV2xwVFVKWU1HTjFlRFJpVldkWVYzTllTVXhKWkdwWWQwWW1aRzkzYm14dllXUkJjejFrYjNkdWJHOWhaR1Z5WDJadmNsOUJiR052YUc5c01USXdYM1J5YVdGc1h6SXVNQzR6TGpnNE1EWXVaWGhs

http://www.firefilesdata.com/WVl6OTRQVGxvU1RsdWFXbE5XbUl6ZUV0YWNVUk9jbVJRVFVORGMxSktlVkZEWmxSNE1HNVVWblZFU25BMmNtTWxNMFFtWXowMWQzcHpRelkyYkZkMlZtSTJTMUEwU0VwUU4xSm5jU1V5UmtoWGVVZzVZMVJaT0hKQmRXOGxNa0k0Wkc1dVpVRnhVVlZTVEdONWQxTm5NbWhMYXpScVdYSlNha3BzT0hSQk5rOU1lVEJTZWxCemNTVXlRbWhxYkNVeVJsSXhTM2xKSlRKQ1ZtMDVjV2hqVTIxa1IxbHBOVGhsWWtZbE1rWXljMEptT0RKWU9EaGpObnBKWTJkMmFEVlJTaVprYjNkdWJHOWhaRUZ6UFdSdmQyNXNiMkZrWlhKZlptOXlYMEZzWTI5b2Iyd3hNakJmZEhKcFlXeGZNaTR3TGpNdU9EZ3dOaTVsZUdVPQ==

http://www.firefilesdata.com/WVl6OTRQVEJWSlRKR1ZsRmpWalpzTWtoUUpUSkNhR3BEUlhGelVHNDVaRUl3VTNWMFlUZzNjbEJ3UW5KV1owTmhORWhCSlRORUptTTlOV3R6U25kQ1kwSmpNMm9sTWtacVp6bG1hRVZIUW1wMFNXaGxkR1ZCYkZSV2MyZFRhSEJuZUhkRFpXaHpSbWxEV1ZsdFJtOVpaR1JsWm01aGFrZFlVREV4ZWpWa09IbEZWR2RNYzJkVVRHbFdaRXdsTWtKTmJXZFJXbUZNUzBWa1NUaFFUMjEyY0VaMlNsaHRSMlJVWm10RlJVdEVkbXQzYmtoVFoyaGpUMjVRZDB4SUptUnZkMjVzYjJGa1FYTTlaRzkzYm14dllXUmxjbDltYjNKZlFXeGpiMmh2YkRFeU1GOTBjbWxoYkY4eUxqQXVNeTQ0T0RBMkxtVjRaUT09

http://www.firefilesdata.com/WVl6OTRQVzB4ZVZKMU5HUjBaemMwZVdaeWJuVlBaSFJqUzFwMFdXcENTR1EzVG0xT0pUSkNUVGh4TTA5UGVtWmpTU1V6UkNaalBWcDFlV2hUYUhWQ1NrWnpabmxIYjFaS1ozVlliMjRsTWtacU5tRnZlRlp0YUhCVUpUSkdVREppZUZOcVNFdGtZM1ZEVW5vM09HdzVaamw0YUVKTVNtaFphV1puYTFsWVpFeDRTekJJV0dSNFZrMXJNV1lsTWtadGJsVkVOM0ZsWmlVeVJrNUJTamR6VUc5dFlWUnVTek5DU1VKdk1rWWxNa1p3VEd0Vk1qUmxkM2xPVUNVeVJpVXlSbkJsUjNrbVpHOTNibXh2WVdSQmN6MWtiM2R1Ykc5aFpHVnlYMlp2Y2w5QmJHTnZhRzlzTVRJd1gzUnlhV0ZzWHpJdU1DNHpMamc0TURZdVpYaGw=

http://www.firefilesdata.com/WVl6OTRQV05uT1RBeUpUSkdOekpZSlRKQ01uZFBOVkZTYUhabmVWaGlKVEpHVjNoMGVVWllPR2R2V0RVd2NqazNlR2dsTWtKcE1DVXpSQ1pqUFhNM1IzUndNRTEyVmpkdmFqRkdlRll6UmtKNlVrcDJlV054UTNWUGFsRlZkbUU0Y1VoMVUxVnJNRVJPVkhkM1ZHeHJiMlJEZW1OVWVVSk9TeVV5UmtvbE1rSlFkVkUyTUc5bU9FZFlSalpSUkU5eFkxbDNSVkpDVFUxUFdqVkdPRlpKTmtGM1RqbHlXbFIyUTB3MVJWWWxNa0pNVDJKNGRFdzFSVWxEUmtONVIweDVjRFZ5Sm1SdmQyNXNiMkZrUVhNOVpHOTNibXh2WVdSbGNsOW1iM0pmUVd4amIyaHZiREV5TUY5MGNtbGhiRjh5TGpBdU15NDRPREEyTG1WNFpRPT0=

http://www.firefilesdata.com/WVl6OTRQWGxUVEZoMVVUWkViWFozU1d0RE0wVnNOekpOVTI5eUpUSkNOQ1V5UW1kNVYzTkRhMlJTZUZOMWNWaDJOMjQ0SlRORUptTTlkRlZrTkZsRlRuSmFka2N5TWs1eFZWYzFKVEpDVEZwRlVGcHJPVXB0UkROVGNVcDBXQ1V5UmpaR1JsWlVZVk5MTldGdFppVXlSbWxtZDB4UFoxRndSVGRzVGxSRk5VdFZlVmRNWTNGclRYQnBhaVV5UW1WT1JHcFhaa05IUVVobU5YZzRaVnBLWldGdWRVZDVRaVV5Um0xWllsVXlWWGxqYlNVeVFsTmFkVlptZVhWVGNEWkdjMGhqZVZrbVpHOTNibXh2WVdSQmN6MWtiM2R1Ykc5aFpHVnlYMlp2Y2w5QmJHTnZhRzlzTVRJd1gzUnlhV0ZzWHpJdU1DNHpMamc0TURZdVpYaGw=

http://www.firefilesdata.com/c?x=7hzBncsMx0deS4rT2CuFC4MYa8qafyenr3vwn5 X6uA=&c=AHv0MuIXcCXmSF5x5Bw8N hEuHhiQOpAnWwF5sEnO77D5u3/ckEa72PGQp05FTlXIOAEAy4WGoAy2Mk42SdzYfiU8Rz0ivoLlyrL47/.../ycIxFW7eDpzcszln&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

http://www.firefilesdata.com/c?x=IJnEYdN7k87chZ/H6dMCltmeX0Af9PtYdRJvHA3AERM=&c=pWiq1/hyWFXPe4jwhjGNFUMyF8B8fEk852q4739i3ZU1sEVWgANuZahiUpgKTeydBjFjo0Y5IVPafi16B2f8hEk/.../Rl w9IP7qvIPu Dxqd6HYAML4d4X8r3VXslWShrMQZQu5KgychWwDGSwVhqyF&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

http://www.firefilesdata.com/c?x=xr9o/HD9Oq QpjkH5UqY VBsOAQcFcsTeWLokIKlhXk=&c=s4Rg4njWo55IvZjQ GBJlcA0la VHuGNa JuhOvqY /KfcSv9YRonDDlM2O OxwE5P LCXofY74joF/.../jtWTF607v3cKGuVGlicfQivjMFIQNQxVqtbqDNQvnXsQ4883APUEN 2ldO1xJckjM4WSZh549qN86DFXOAlXSFb2DCGyfIktV76ebZKezgRv&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

http://www.firefilesdata.com/.../bg1kz3hK0UuXD55hObTgZbgp7lyRL02cLxXcPgc2G2lqysK4g7VjM9k wOm85ts8BXBjYo130RlHvk79DIEgFPO8nZFkuq3Adn5G9s6LAL7rgKUtxUXzwI&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

http://www.firefilesdata.com/c?x=Nt/.../hOW20sPENo5Xs0onCHkH0jwry439kwYLFgp6dY4ScTb5J5bpZ3hrJIZbG79Y&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

http://www.firefilesdata.com/c?x=vfcggdEkQB/MS2PYQlAeeXAVK g/ACorYWhShMaacVI=&c=LMZeiVpVz1gzs0ifQqxOH CmpkC0sYRXFX7LmuDszCApgYzts0ORZcBYCayOesFwDWdFBXsmLEPz6J99aiR72IeXgtXUElrdNHspmOWXSpvpzMCXZhvuhR0ebWq4fqmJlJxMIkGiwG27wi6fFcwSK/wE0ccDlLrExz0tzVmqIsKenujg Cex/.../huKHWOyLn&downloadAs=downloader_for_Alcohol120_trial_2.0.3.8806.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.