home

alplayer20.exe

ALPlayer Setup

ESTsoft Corp.

This is a self-extracting archive and installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ESTsoft Corp.  (signed and verified)

Product:
ALPlayer Setup

Version:
10.11.8.0

MD5:
a4ab9c2a67e140294f2935e936888237

SHA-1:
8b11abb56ee15d5cbf5c9b846417be4754892fa3

SHA-256:
c4b5e53119cb8a9024765d0b86bfe43d7216261c8424df6a92a28f470d1cb882

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/26/2024 6:28:38 AM UTC  (today)

Scan engine
Detection
Engine version

Vba32 AntiVirus
TrojanDownloader.Agent
3.12.24.3

File size:
12.4 MB (13,017,480 bytes)

Product version:
2.0.0.4

Copyright:
Copyright (C) 2010 ESTsoft Corp. All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
ESTsoft Corp.

Authority:
VeriSign, Inc.

Valid from:
11/5/2009 6:00:00 AM

Valid to:
12/6/2010 5:59:59 AM

Subject:
CN=ESTsoft Corp., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ESTsoft Corp., L=Gwanak-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7F37972EF9C4A45852B3AECC4F5EA9F6

File PE Metadata
Compilation timestamp:
11/17/2009 1:03:29 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
196608:AMXbxVYNHAktjD8ZAr2iQP+aPsvIGViMSyUw7pufBM453qYx5AeDASePEkp5LCcC:nbxyHv2iQtEgqiMSy7QOs6CAjSTkpwcC

Entry address:
0x33B9

Entry point:
55, 8B, EC, 81, EC, 84, 01, 00, 00, 53, 56, 33, DB, 57, 89, 5D, F0, C7, 45, F8, A8, 73, 40, 00, 89, 5D, FC, C6, 45, F4, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 80, 72, 40, 00, 6A, 08, A3, B8, 3C, 42, 00, E8, 84, 24, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 3B, 42, 00, 8D, 85, 7C, FE, FF, FF, 50, 53, 68, 4F, 74, 40, 00, FF, 15, 58, 71, 40, 00, 68, 44, 74, 40, 00, 68, C0, 33, 42, 00, E8, 74, 23, 00, 00, FF, 15, B0, 70, 40, 00, 50, BF, 00, 90, 42, 00, 57, E8, 62, 23...
 
[+]

Entropy:
7.9997

Developed / compiled with:
Microsoft Visual C++

Code size:
23 KB (23,552 bytes)

The file alplayer20.exe has been seen being distributed by the following 25 URLs.

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1485153760&Signature=T0oMP8-bfMteuJu4J-pN9XNvkkIbyjvWTYTHwaBuuIOJSLpScwCUK3iy5ZEs1U5h9yVviUMPOf1wMsL0zw4Q81asSRYg28FtezYileTurWVJJu~AIWTaKrCV~NzlMAkXQ4TuPmueamRdAtf2bL-PcVknp7swbHakn5zJ-Ubw2d4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1478652575&Signature=A69qSwbAjXRd4WPP79VJ3nuFHu0rw~-Zz5qzIuF9sCUyJ6jeH88tXrNBn5x~YxfArBp2jdLuMcH04-92F-F8Eal4t1fCqlP2120BZYk2cFZNY3cEtYH-MTcXLHWiGPjzmtcMufzvLeon6DLMFdn1T8Z9ni3XhcPSWGJWGUS1V0M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1454279110&Signature=bi829Gi9-K-ANz5YsFsuGq8gcb3Y24xgddgPT-1pHvEawJMHy3H398GZmRIAyYN0HFPWw7tl~1TRDRmmyNbxhtVpyAvqUwdMjoqFlJbNvqzSPUF-HAyvRHg2vhP7EvuQKq8c6HPXiABNDJ8KkVcBQMXNsT5gG-bb~ofSgFu5NTU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

https://www.programs.pl/pobierz,1137,link.html

http://www.programs.pl/pobierz,1137,link.html

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1433908086&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=Ce3VmUZfKdnYNU3rfolGZWinNlXfGKJKa7suBy8KC2JMERCwZzxkPRJwSqm~xcS04m-oyvtmVnaAuc~q53TUVWwhVSf0JoDTktZd04X2ut7Az-jgVXdlr3mMaouQX0QaqAfWYQpqfo0WPG3kAFvVMDvfoB6SLtnxusAdijQHgAY_&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1476081326&Signature=YHNlX65G8PPNMCmNuDh1gg30B~O~IULNAidP1iGiAV87~CKv64MlSrt393taAXIxBH-do0OP5qljfk~DvhNBsVOQIxHS1rX~s-Z1AYtC7N0L3nat0aVL5zLTtVnEOXomHo0335WhYYLQHiXfoDucvufi7LGHDnyzfv4My82nhts_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://download.freedownloadmanager.org/Windows-PC/.../FREE-2.0.0.4.html?ac1402d

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1446955928&Signature=K9ZJAPooyEyWsqamIhdpm697pOt0y31i0Qlkf5NNYg2dTe3yOf4pkrHlDKxGf0wZeag2~m35RAAomc7paOqcaUlhtgcMdtNeMvmgXNNRPiJ~cQWNH34l6vK7A-R4kqgApGOdv~odv93CcwVr89cXbjB76YnJvgnxz0uVDvcqBM4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://download.informer.com/.../alplayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1461554777&Signature=fM-F8gPVkG0XjOdKj-UUDrQpgQgT-Msf6QnFt32FT6p2gRMENm-XkewPq8mDaV6614XMTLAXOp1wYiFxmNAA0pR7LVx7nDAk3USDpzthK4MbccsiolviiFwuLkTLQUlhKNIBwFxDH9afgsuVbzpJrYEC6JYnmNrpKFk6gh~ZXlQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1428356990&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=P25H98W6nuycDrSjhWHz6hMzJ0hckmJyFroF8wa-mOwslm0CKR9Xt285njEdOheYOT1cKY7f6oV20YKAwcSYkoCMyqQbtfOIDl-g033dD8HGpd88z~syquv00hqfzOcJuklUzUaSoXEMdkSJgmTdd5lEGfMOQQJxG2BasrwEzIg_&filename=ALPlayer20.exe

http://s10344.chomikuj.pl/File.aspx?e=pC4MppDLHYwCvRUVByDr_xl9K0QXhO3kynlfxaECsYmI3Vt9t08ZE9gLSqvylVV8__e1AWHlOy5FsP8RoY75zlnlevLhcHeRejJGg1FjDnonCVCEvSGlROK1hoaGnLZtVLeZbheBplC3HgWBScbEpQ&pv=2

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1437520451&Signature=CAVVFhPoWQPFsvFh1-aIjktUxZHWgk1D63mS0KUNk3tQyF14EL4yFfP8ZVGEHNG8fdB7tXEnHeilGd4K0~iDGmpA5uJpunVVybeZ~VnWBsmVE8PNCaVFlceYHzmtiFcG846zjI1ugqJgpULE~Te5lHydmN-RYwmVGEZptdWy4QU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1454202681&Signature=JKHY4nS4XJZPn4Ggh-MBfCAZDzw~ptYn8tXJJe2Q8haeyC~-SpssUzLc6IZ72Yr83itqntmfTag0MPCl0yj4zm~dA5DhYd3DqQbk98Q7No4W4vjitokc1sz88l43Jb8~qyzJMR1CbZVyx-UZ5I1Wzq0fb~grUrMHWAU3d5y6RNg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1439959238&Signature=IXzYatYMC0FH4WWH91EdCzLVSRA2r5Bo1cDd26iI~RvWl0fWO8iQxTe7vPBd4TtuQq3n0SXgsoxwfPZBl3yWb1C6qstJhKDXogVd3rNfGnavm96X3EFKlUiItJcSJyUZ7LVLihsewD8f5S1HOXpo7csHQWgykuYWb9aeecHfWRY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1457313976&Signature=bph1zjzdd~B1vLjxhmGG5rkCPxOwNxSEEn00uiWcTnezXyQKBb71QsUlqCvX9Z68Ma8Y-qjgafzr5eJ6UtsPBPpDvlmSiMgJj4ut0tQ31HmBWJOFxr2DONBVGFnqTWiqT-MdjLWileDKCfsZJ9YnUopp3cD2OzXEYwrg8Ald6CQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1440970496&Signature=P4cwhQEwMZ4h~7o3dBTzUEqTouSmbsF~5rKugUB2CjLacv5-gQxScsyh9ZLt0DJmfbsBXhqyfwYPXjreQmi7jaY0I-8ctWWS4tTaeKtm~qebRXJ8RI-6AKvsYyBjgqvPxxp~XYmK0fu6Fy8e~9gdkFJWUdxc5VuSuqIxoGUotAo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1428467797&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ZEdYGAsylzk8I5MVaYsxq599tIMWq12diSNwyGEOskrM2AVOx3WQrGil7ZpzOcYwmdkLg91dsPxEAK57vdXc6CuHK1wpnBnveCP9dIVXwnIuVqR4~V1gyoF3Jr0pSGa1Jm~t08Joe4VhXRwGaFpefxmFQCmPg3UTpzgxzNeht-w_&filename=ALPlayer20.exe

http://www.altools.com/al/downloads/.../ALPlayer20.exe

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1445315690&Signature=WnLszHPF0eYVSoMSTyAZ8gTfM0C3N71HzSs2Y4rrqhxH8-ZoeKDUp8jd3AUp5DFmEwPP3AQVrVRPFWfC8jhDGyOPXKfVmk9uHk~ksl9bcGoV0ZXvvitkMxShFWOVhc8Y2QCMm~eUO7-j77pUEkTfJk359ezZe9gOVxM9Slyukh0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://alplayer-alshow.softonic.pl/download-tracker?th=1/.../uOpj8X85CalfzBXVeDLVQBSz4y0Y6PzgCAmLA40SRW0=

http://advert.estsoft.com/?event=201011091092211

http://gsf-cf.softonic.com/8b1/1ab/.../file?SD_used=0&channel=WEB&fdh=no&id_file=47518&instance=softonic_pl&type=PROGRAM&Expires=1442092221&Signature=exbMDppL-hUMUtzZAcJ-QVQVcL2c~K8sBedFbNnn27Z~BKrtC7fOVeSdsEy0otqC0PlaXFimWlgvRAaCjaNyBHK6NPch3EkO-RG-EX9-ffzE9njHYjZkr9C~6vjTcs7xMm3-9kWxvNApCniFLeYNlLK198Im8oD-4BVHC9XcvGY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ALPlayer20.exe

http://alplayer.software.informer.com/.../

Scan alplayer20.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.