home

icreinstall_alcohol120_trial_2.0.2.4713.exe

Alcohol Soft

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The program is a setup application that uses the installCore installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Alcohol Soft  (signed and verified)

MD5:
f39a36a0bc2dce938036e7a15c326913

SHA-1:
bf2ec77c2af4f7beae2020aa7f3f2882768f89f1

SHA-256:
d2b00f14ea3737b2435aade4d7f1cd6733a3b8bef40588ab2712e2704f3ebf4e

Scanner detections:
7 / 68

Status:
Clean  (7 possible false positive detections)

Analysis date:
11/28/2024 1:00:18 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
ADWARE/InstallCore.Gen
7.11.121.86

Bkav FE
W32.Clod3fc.Trojan
1.3.0.4613

Dr.Web
Adware.InstallCore.72
9.0.1.0357

ESET NOD32
Win32/InstallCore.AX (variant)
7.9190

F-Prot
W32/InstallCore.V2.gen
v6.4.7.1.166

Rising Antivirus
PE:Malware.XPACK-LNR/Heur!1.5594
23.00.65.131221

Vba32 AntiVirus
Adware.InstallCore.gen
3.12.24.3

File size:
1 MB (1,098,120 bytes)

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_alcohol120_trial_2.0.2.4713.exe

Digital Signature
Signed by:
Alcohol Soft

Authority:
VeriSign, Inc.

Valid from:
10/10/2012 1:00:00 AM

Valid to:
10/14/2013 12:59:59 AM

Subject:
CN=Alcohol Soft, OU=Alcohol Soft Development Team, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Alcohol Soft, L=Belfast, S=Antrim, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0EEFAA2A5FC37BE316951AA9F8651331

File PE Metadata
Compilation timestamp:
6/19/1992 11:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:UPjfbWXV6fA93qcUnNSfMniPhPmHbbnnCMSh1fG:U7ZA93ynIMiPhPm7bnCMSLu

Entry address:
0xCA8F0

Entry point:
55, 8B, EC, 83, C4, F0, B8, A8, A2, 40, 00, E8, 9F, DE, FF, FF, 61, 6C, 05, 00, 00, 00, 00, FF, FF, FF, FF, 90, B0, 10, 40, 00, 0A, 06, 53, 74, 72, 69, 6E, 67, BC, 10, 40, 00, 0C, 07, 56, 61, 72, 69, 61, 6E, 74, 8D, 40, 00, 14, 11, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 14, 11, 40, 00, 04, 00, 00, 00, 00, 00, 00, 00, 78, 37, 40, 00, 84, 37, 40, 00, 88, 37, 40, 00, 8C, 37, 40, 00, 80, 37, 40, 00, C8, 34, 40, 00, E4, 34, 40, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
828 KB (847,872 bytes)

The file icreinstall_alcohol120_trial_2.0.2.4713.exe has been seen being distributed by the following 19 URLs.

http://gsf-cf.softonic.com//bf2/ec7/.../file?id_file=22703&channel=WEB&instance=softonic_pl&type=PROGRAM&fdh=no&SD_used=0&Expires=1376448002&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OE37jvyupFP9TvDULQFBXNfbMJCZNSYuR6reooOFb9fTMHhdFzIuLoGF96q57CXnwvM~wpzQAgRA~O~vATYHimKZZiSpUuYWPdKO4KCiI8AIoH0MZgRmlmQjcds1lJjIM4lSBhL3bH09dR4gNXJG9unmZcpsDjM4Jm1tB7XK9Ug_&filename=Alcohol120_trial_2-0-2-4713.exe

http://gsf-cf.softonic.com//bf2/ec7/.../file?id_file=22703&channel=WEB&instance=softonic_en&type=PROGRAM&fdh=no&SD_used=0&Expires=1378606200&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YGE0DYtAyfNnpqXR3YAuB5IykU9D~oFhKzs58Kw6HKFLyJC58E16fLm7efETa94DMFNgHfZoAZGu9Gl9T-cyURIe-hHgUSlwO7mivM4aBRu6AakzFYsmigrVL2OWaq8EoAhOhj6Ka0pRHu7f8u~N2FhbcaJqUCfivNx6vUwcR1M_&filename=Alcohol120_trial_2-0-2-4713.exe

http://global-shared-files-l3.softonic.com/bf2/ec7/.../file?nvb=20131008113828&nva=20131008233928&token=0110baf88d38c33987569&id_file=22703&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&filename=Alcohol120_trial_2-0-2-4713.exe

http://gsf-cf.softonic.com//bf2/ec7/.../file?id_file=22703&channel=WEB&instance=softonic_es&type=PROGRAM&fdh=no&SD_used=0&Expires=1376208439&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=boQHv1d53r6kL5QyvGu26b3awbcvZqlXCFLan9B5lDt~8HXA-pY1dsEo2v634wal0S5Lw68q4Txo40FhnQgBOmEUBsjknKCpzriXHKhAiFRJREEMYtMm8gq2R6DP5jBUsK9zjXOu5wa2ipr0ukfl~ySd6dQrGPOayofqtyZSzMc_&filename=Alcohol120_trial_2-0-2-4713.exe

http://sd-cf.softonic.com/22000/22703/.../Alcohol120_trial_2-0-2-4713.exe

http://fs40.filehippo.com/1649/.../Alcohol120_trial_2.0.2.4713.exe

http://ftpclubicb9a.clubic.com/files/afcd4062e6869cbc3ee07343166c5f54/5215d737/.../alcohol-120_alcohol_120_2.0.2.4713_francais_11016.exe

http://sd-cf.en.softonic.com/22000/22703/.../Alcohol120_trial_2-0-2-4713.exe

http://soft.archive2.clubic.com/files/73863529567a7e1072acf08d6d706435/5257f33d/.../alcohol-120_alcohol_120_2.0.2.4713_francais_11016.exe

http://www.gezginler.net/indir/v/1749/.../

http://dl.commentcamarche.net/www.commentcamarche.net/download/.../Alcohol120_trial_2.0.2.4713.exe

http://gsf-cf.softonic.com//bf2/ec7/.../file?id_file=22703&channel=WEB&instance=softonic_it&type=PROGRAM&fdh=no&SD_used=0&Expires=1376702385&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=TPaDiJoLvNWozRYsHG-UTNt7I6fSfAwW30EYzeKxLnye5BM~It2cTO5hyhRATjA1lHSFWbpdu64EICFrHt6quDoExM~tS6wtmmdL-pbW-gWGEu-f~abyvWSgRGn65WVGLApvGXLN3moabXYo4upNeku0L2Va9dkJTN05FZSMOXA_&filename=Alcohol120_trial_2-0-2-4713.exe

http://www.programosy.pl/.../pobierz,alcohol,2.html

http://www.07l.jawnet.pl/.../Alcohol120_trial_2.0.2.4713_[www.programosy.pl].exe

http://ftp-stahuj.centrum.cz/dl/90b7b0945a95f6bb900e7d468e33d4c2/51be1b2d/stahuj/download/software/secured/a/alcohol-120/.../Alcohol120_trial_2.0.2.4713.exe

http://soft.archive2.clubic.com/files/ae4ffd6850b7ad3b3258e759bc990372/525ee73f/.../alcohol-120_alcohol_120_2.0.2.4713_francais_11016.exe

http://ftp-stahuj.centrum.cz/dl/41d1602569944232ebc1f469c379b1c8/5214b8b2/stahuj/download/software/secured/a/alcohol-120/.../Alcohol120_trial_2.0.2.4713.exe

http://mirror3.free-downloads.net/.../Alcohol120_trial_2.0.2.4713.exe

http://software-files-a.cnet.com/s/software/12/84/77/.../Alcohol120_trial_2.0.2.4713.exe

Scan icreinstall_alcohol120_trial_2.0.2.4713.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.