home

downloader_for_alcohol120_fe_2.0.3.8806.exe

Leco

Alcohol Soft

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from www.applicationquickbits.com and multiple other hosts.
Publisher:
Alcohol Soft  (signed and verified)

Product:
Leco

Description:
Leco Setup

Version:
2.8.4.6

MD5:
30b47a3d111c3b119b112be031143f6e

SHA-1:
0d4a76bd5cede2dc727eb7105c1ba3bb3e470043

SHA-256:
3daa40bd0b2382b570476bd2a4043bdbc0c18c0e96e3e0895076f5ed5b7ad83d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 3:42:28 PM UTC  (today)

File size:
997.3 KB (1,021,248 bytes)

Product version:
3.5

Copyright:
Software wizard

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\downloader_for_alcohol120_fe_2.0.3.8806.exe

Digital Signature
Signed by:
Alcohol Soft

Authority:
Symantec Corporation

Valid from:
1/26/2016 3:00:00 AM

Valid to:
2/25/2017 2:59:59 AM

Subject:
CN=Alcohol Soft, O=Alcohol Soft, L=Belfast, S=Antrim, C=GB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
608B7C5B34BEC5ADB24C2D3C32F62AD5

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:wAvlwfRuzJhcZ9dksl1RehAsIbjy9Aus46o3mrtkUZT:wcS0zJSkM1RGtIbG9Au76+GkUl

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file downloader_for_alcohol120_fe_2.0.3.8806.exe has been seen being distributed by the following 9 URLs.

http://www.applicationquickbits.com/K2_32KIZOOgIYu5GB3b_dc9pXsz8TDnm5K 6VZSTUqzlVtbu2taMVLb1tKkNeCfaR_aN79mlhMkv5_tCEHJsEgi6RcViGu1iv8wqSa93m0ZwUn_gk3SbnPuJRrJQQdd0Pj2uAhHJhiCmQaTnD295PK_ncQS22Ek9F2Gd0azO96V74pDVdhsFTWL4YsyP3BVDPImugWQv6hDvesQYTgmL2Cnf4wJhx4As _Uy48dj_dnVS8wPRdgpVCocV4B151prWXa JUwkFWSlbhg9_2j3qw6ZpUSLU6XmAJYzwXo_SGSyrvdyO9U0kI3VA8gJolALzLjldMQrssZHlp4Ia6ZH5bVDk_TtTGGlQtEvUyl 5FSXOM_IIVxkjbwqSKYx6SV_0JBHq8PSQLt6GmByJCY0w cK4VVGs9YlfWjxHHt98OKCb0Oy2ZPMJ5QPQAoQRYw9rIFvLh1hjvJOhThhHiNScvn0W2KBQcaM70EfXxeh1E7_T46r_UZ5_gzviuMZwAmxhztSyg7v-Ow==

http://www.applicationquickbits.com/oCL4fOXv3ee4PektZDe4pbqta8WHS9hv7xuF_nBaqgGKKrIE75zkRSnbgIzjE68B1ZpRHPOVhAY217MHsBc0fbb2jGHHsHWsGqxvhzZVAO5uFzeNsp IlgnIU9 gwBCS_CvMd2ZTe5kd1SKHWSFPdkOTmk8o5_AEkjj7YuF4pxAEkM66PeBfi95l0An1F h3nI1X3EGy UK6Zom8e0GDtyGSkYTAOBoj8TYdwdTA4Ir6t5gCBFK6tXeAD3 AFwHoJdn51XlXawC9ayFZWGYJ3EyRjSItJK8lZ8UjkGUlrrADLQGd1cXyNWzXSicViLLwqUL PWdjIE2Nrtf5nkEXDBjDbnZVk9PbQDB9ddGYysKdVdxNDNjWnYphG2V3D5gcmClEWjt2W_2cz5 uKdu41okvAOczMEjIalvrBAoN7id6JbNj9Nh518Mjz1xP2j9i3WJydOjRA7VcVUsSF1Qs05OssxVwLikgoTfWnd5CjZZkwI2iVw=-Ow==

http://www.applicationquickbits.com/FpFm1mI5M1vaKkpO08J2Mo2GwZyRCwCxZcy66fQ1b4vo65BRPMwdtd0TK07KOYm2IObpH8kJ lwKBosDIIX2yiD8lbQ2n7tjaxjtxvzy2cr5LvNoMcIjfimRGosVqZ3sP72QIhdNf9GgV8ipjz6xuuRT lRG_HpHRDt2UapaYvJGN9o3EVq5jDUu6jASRgMdYwD zpLsQmodgkmQpc3_sCQHGCKrcZZA7Rmtf8Vp9_wpiEL376SMm99eUJ0rlaIACENkJnTvN CP848CjOBBu7b aVBhT_guLiThY1c28HieaZ2gyraAMPS2XV5AGN9t0wBXgFAjVUFQCWr7egrUyJNqlOgYFL4Fl_PBDe9KhITbd_J3MzGHZT7UhBKUh73LGfjjW5K9bLv9AwPj9J1tmtRU0Z6jrUZ4sUs4jpbJyTLY uBne3lXlNtroi6NSRZWMiBmRCGmwpqzlaNLT_H8WRskZkx9mUaDatMzSsvt9ezuIu3hblg=-Ow==

http://www.applicationquickbits.com/Ylp3LCz0NzlCGkyE44jBPit2_0pEm3gstElXDsHwra94oIBWu_JQ5I8eMIbrUfMoJH6pd11LTrh1098_j4GcXmdIG_p6yTz1Vszudir_2ls pVkDI6Ax0W5PGvxu3Rvx9 2vhmtRRL1qritF2UgMEVsjTcRWFKMxk12lGkTyreVu8HWmtiLBz_UjKha4sdYMwigCbOp00MrtpSmUVWp1inrDZGXxXYiyJPOePq3W10u18vMNuBF5fqjs1FfkkhTrY 2fefgTAGWNK0az86CfG78abGwtyvzqvH68NNLo5OSC0vDmNBullMM1o_LJrVv31TSc FkYYU43hyk9WDfmGi37JifWbkpgjhFaqgcaYJgJ0MNYMV4MU1_5gs8NioJzna _htrL9gCQbmV_grKc23 yUmLIPW5CTgynf0cyLX04KhW DMDSFI1dua7ZmTIxrUShUqQ8AD1XigUxZClfTRFH8xJtM_sLMbzPFM 08 CDKfy86uI=-Ow==

http://www.applicationquickbits.com/UB _SRF0H3IEqGslG iAZ2MwjwN8QALkM6iUxEAWPY8936KtoffGDSnivoTAXwTJPLeFOGqY24JyZ574Gz68j C6 iT6zWTvc2a0e39dETWsaJc9_Pmvf9VRVbCjVNHeUwxlCY6jtRAGEcduMi8820_m58A0e07xfnv0jOWbreizigVzT_rTsaN5wLA1EamFUM8rDRll8JtNyFv5khPbQCKGZDxWJZLQCPu9yEP79BJyx1obueTtsOkuMgkxUVLeQjRkXg8Xa6MTQczMz7J3b3BwPbHkvPFqJmu3BLqdLpzbU_Qn8L1xnvUjUMo5YfqQ 9vOgp4bbAIdHBlW1ohTFWXjO2R9RoEKuEfmKfrGdAglxAvFzsV1EprAq6cMB6HEK6a88iXKp9mI1Uk7cOx6bJPyVFyMVLxDZNMPhIjM3SlrIfirKi aD8gE1 WcwZC0EmfKzgiLhOLW72ywn7xYouvlqfnB9Tw8AFWF15FDpM0YhqV3APU=-Ow==

http://www.applicationquickbits.com/AqiQa6b5Okuv8iCT61xuF p4_yh_Zkt3vj1DmrobLPqwALRF3q2FahJ4s7Agp1yR1pEgnZbqSRdl02uAlCk6NPRuZXyShOHmqXASVh5thgATmJg9gL2qiTWl1A3uoPSBRzgE7tQ7Hv9wASCTJXTPGY Lp2kceDH8NKm SLTLCIJU_S MbH3AXqCsP5hF1lSe_aUZlu_iVoLNgPpRr1b2cNOjAYvIFgTAYQh DG4wqciB6ow0dO6EjWTrGMLQQkw304l3zGQYuzESqGQklahKMIbVb7GQs9SHwQENLduGYEVeRQl31EHNfGVihgBvfaCRW9HjXsibOm5EXQ4kPdO9bTDDZm8Vto1HpH4pQVsvimq1g_lWbp9QpVlSnBe0CjtJ2aF3JA8J8WNId5BgExD7DHj1QMR3l342_d3PIesTNVM6SUXYN1 vvOhmKljlL5vyttpzuwKyWGdWZFewsxya5HzQ0pRW x7spFh1aFjipAZwggS8q7c=-Ow==

http://www.applicationquickbits.com/M8rgO7QR6AMG0aSPKuy8heipOpHJoxZrpbexTGCmZ9KPn00Ai6XiiJShaUyJYEGCbbltZXtvCWJkn4Fg craqNip9Wq8iZ3DZQvPIxx3DZMyZa3nL9TDV_uug5yo055FBbygVgtBXILdB2y7iqq017gkNCbrDHvv6uZ7kV44P6u_5LJN2IwaHGfMRqLZpPy8SYneao7uJ4eD9A_xyI0Aswpx1pimEpg91ekDzyctdbdf2XFFE3OsHNCma7sl5g0heYQC1Yz06SHccNjRHaX9nzAaQYe8XleoHRkms5fSmCjiA4JhkmTyGjaAVTDVHXD8gYeNUTUEYIaZbi8oTFlWtWn0d341skAzD7ULsQl5YVydom8BwZdrwx08IVm9MB7U4TAZHoxOhTXh8ZckBhN84ntXG1enBrUtZng71iXevxBPWdBeoqFV9jtyAO LISSkyHpJO91lWnB SNwwvxnyYBvrvgsGUzLd23i2__35QkT03lbmdUMJF0o9bn_Kl2xCH3viILEl-Ow==

http://www.applicationquickbits.com/QquY IwYqLQbT0p_AJ3URNL3YqRWNqDZf6DS1B0klQ4WQicaX5Vw1iF4ocbrB7vdALTpq1QDCzcbMgSlNpYUbAZpaJVo_jamoALd7cHey_jDR5eMdGvkCBD8GBMVSaF5KjVgHzNe6BQw9cHIGoDuE8uBzVb1wnZ6E5 FZuq9piwuGnJcbfVg2oknzd9XiRPL439SPDPO3iy5lsbiUht3mRaYhEARL_PllJaYMCK91Tcbm1HRcJ880g8HVgYOGEWTNEESpty9RTcDIMD0iuW_e6nnEEeh3IJslz4VllKPxpAWQHtp8twBZ4i4Uk_EqGkgsVVPdo3KSBcXjziGE zcu5QQhmLOvsvugZJD0yMz6FKw4pLkyZgy_VuXyszUAO097bNG8gqtyUv8pZ4qSyYq2rATlCrudBdQvGT99xUSIC_MopMZH1FFSh5x77sHXYTEarFBr8TLWVN6NdNop48mciycPAf1KSp9Z8VCgOyhXIHpK5fSuqEGgUy896mUm8MfFg2HccmX-Ow==

http://www.applicationquickbits.com/bup7sFJeHwBbNrnMcAQtPd yXgVjuZsXFlBZDKXaDowbpQgVayfj86eCnSWzLBFfOtNPAFq3 8DhBgMLxbLMSPGLVDzZXVkE_ePhI07nvv8p8XiwJDjkmLtZiNBK8UYa 50TjsS7qOLthkffjYxom5qgU5rx7yANldvZ1GzdBSWn Jc73SgV9SftYXEVhy2q0g7eehRezQLupWUIdCLIviJLj8BtZo02HVHgk7jL_4fBB_OgpXyBv3PkIlCnt6ko2SZsG3H9f_s24hSMbuEXuv8yC mn_fJ27qSsBq5yomQQm4rkNsZ_nVc5FVOfjdXyNuURZA6Gb9W8HOlkODrx_Plo2LW0B7yLStgct6CQ 98NvBjzr7uq3Ldr PNmsrSa18A3YGqpClw2dz3jxFZa4nB6ozZS23yMVhB9iBoTkI4Dgv5qP3npGgcfr_oK8i1L03yLnckSnj4maGq1N7gkohy8_eF6cOlhq41c93JgEHTrwnBzfbkaNdxzNJrG5olw8KecR4n-Ow==

Scan downloader_for_alcohol120_fe_2.0.3.8806.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.