home

opensubtitlesplayer.exe

OpenSubtitlesPlayer

GT CONSULTORIA EM INFORMATICA LTDA

The installer utilizes the installCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application opensubtitlesplayer.exe, “www.OpenSubtitles.org ” by GT CONSULTORIA EM INFORMATICAA has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from the user's temporary directory. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ALLPlayer   (signed by GT CONSULTORIA EM INFORMATICA LTDA)

Product:
OpenSubtitlesPlayer

Description:
www.OpenSubtitles.org

Version:
4.7

MD5:
d40f6df1c3d82eba621ee278cce1c2d0

SHA-1:
de34ae8ea5efaa5d95271b01f716d19be501932d

SHA-256:
3fc5a1c446324b2146ae281237e182bc3eebdc209fb0e96e598252b34410ef2d

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.

Analysis date:
12/28/2024 12:21:56 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.GTCONSULTORIAEMINFORMATICAA.T
15.1.4.13

File size:
19.4 MB (20,313,488 bytes)

Product version:
4.7

Copyright:
Artur Majtczak

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\opensubtitlesplayer.exe

Digital Signature
Signed by:
GT CONSULTORIA EM INFORMATICA LTDA

Authority:
DigiCert Inc

Valid from:
5/18/2011 2:00:00 AM

Valid to:
5/22/2012 2:00:00 PM

Subject:
CN=GT CONSULTORIA EM INFORMATICA LTDA, O=GT CONSULTORIA EM INFORMATICA LTDA, L=Juiz de Fora, S=Minas Gerais, C=BR

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0846BC10E838931D7788C07033AC472C

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:x1TSAtCVkmk4CJp3TEu+/lh34D3bN8p591iWk79zH2rtxNjILf+dUo3mUCPr6x2:3oVkT4oua3bOXv29D2rfhI6eoRmri2

Entry address:
0x9B60

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 66, 95, FF, FF, E8, 6D, A7, FF, FF, E8, 98, C9, FF, FF, E8, DF, C9, FF, FF, E8, 0E, F3, FF, FF, E8, 75, F4, FF, FF, 33, C0, 55, 68, 17, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, E0, A1, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 02, FA, FF, FF, 8D, 55, F0, 33, C0, E8, C8, CF, FF, FF, 8B, 55, F0, B8, E8, CD, 40, 00, E8, 17, 96, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E8, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file opensubtitlesplayer.exe has been seen being distributed by the following 27 URLs.

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1467659837&Signature=hplT1zZ1ti03zpNxQ3lFKbUelCPxH~364ppiCqBdfyHPbfyRsOkyvwbaEfm7KK4Rsx9IGbQ243H4ELi1SfjG84tULk6oCzpq2Cm8AI~HrOjJq1hDGtdfmukOdt-aiP2~Ep8R~ZJ~RtQnyL7Cecv-m7ontUJuU5PhhsIdNwRaeKA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1452516641&Signature=N~CU1hGx7oVU0aq8XF0IgD2Jf8WrG37k2ygO3ltK4Nf~NMMTOkpG0ipqkptE0baskwSAETsz9NS78g3LweYCZTZ83thlrlO7UvE6iNpfFJjdX9GOopEFQsI91EQCazLO7v023rxrIl3BhrMAiKF73DB5r6mQr-HSU0XoDGPW8bk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1434195594&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=SPsMCAS-cZ1HiAhPqsaJr4a6QWBM0MTmDUG2M4dSI~dFsv4r65YHuTc6cCIeLGKZt0yz6meGtSDZI-w43tVdQYLUwntumcNpSHsF4VqaMujwioeNMgQZ95e2EDlCsxiv62MX-5zEpx0GUDFvfvDI~yoXw9EoZkygU7YOYGEq-7M_&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1476393884&Signature=QD5MfWSZ072txob12illuNUnKcbiGABmthcrvjZUXAq2G5wEd9jIixqv5U5ipjpwEW2Naz8OMOQAsVCd7qBukbFY-ZeREE~hlVqil6fFsn5hxpRMelAGag1nZglRjYhroBToXJf~fqrIDJXYISOXhAT2VtY0bmIt9D0PK-Jru8E_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1464403279&Signature=ixgLvilXZmXm667CfiztKzrkUnm72MIYtlI92kWFIlI6df84C3cEzT8Hcm~UzqO4m7Mngq~czfD9ru~vqVvy1Yethjwtho8vnKTgR8X4ZwTbKaR5Ck3aqboUPkQHdxXYN09pcDhu9a87Vk7-qbje28ojhaqefVCyDBIFNfUHCN4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_br&type=PROGRAM&Expires=1473296570&Signature=aY-yJyXQa0mqQHycnYxBYdS-UeHuWZUZ-G1XHW8YV-vTp12bg~UHcWQaE9HX2h7OnW09d~IcIIpmZ-cHmcPE3pOkVP9wPZrwLcaQ4nStYI41neyenvVFcmx6botIfGzAbC-KUGUI1OUrkcRvkcHcYQwWaxYwgEaCj3HFi3WVMY8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1435903673&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=UkNaSYNY6fAmXG32Lxjw3jyNrAGVOWrD385YB5OW6ihP2hd9iop5jlv6pnzM2-mELsi9OJIt7n7f7lhLHxJaYsf3B7whXyUR0QZ34mACzIhIz86pwwwJnwMkTqW9cZ7I-kyqI8Ji18FqBNHBfFVQcy7Ve3SokCaJQilTEdJjmIs_&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1446707354&Signature=e9uGy9T-lSAIkYjZMDcZNa4MFgmiN-oW8EVBLr87Nyv8oNi~yC2cz2pFcZCT4fowOtzo6d8q~A3pY9iKGNrGYwzEpwN6MNVLvpHF3hK0GZDUBShA8vhz1Ra1N4nwBW6~wQtFAKj61MSLzilNRn9A2lGtMOoroB8YSuz2VnMF3S4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_br&type=PROGRAM&Expires=1453638987&Signature=eewdscnLPwWr6MW1s3AfWOghX~2IOgFiixewo3tzKwZ6neRIPMY3uTxtEwd0Z-T7Dgb6JUkawbhqLkEEtRChEmCyY5JfIQPeXkREl5e~MZeYOqwxgxFRFibqcJZ3IzqKCEj~a2nsgNIYj5mZanybXEGjdJl7txJ1to5v-pvof3U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1466714818&Signature=H6NqJsWT~z9QuqlmDm5gJINtZi7Ygm28Z5Un4kn4QtIZyDYgXxs46f8RN4THUgzFufLwioo0-zFjBpNMn64WpUZEC19QFevilVb-Gzhuo9lFoStC4QriO5JzsUmNalTeyiG~wMqA5VXR2qQa4yFQNN4cv1i6aRkU10E1l3EL3bU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1465638602&Signature=XSqbYjufBPjuq4j4PaVzyEwVHH9pXWgaVTv0OIIieRcrbZ2H2xMON6l1vl2KOoAtLqlQ5SrZSi7u4A9zWyCP1ByLlJoQAa6TxTVrfqPoFPVgc-HhfbAnvXRBrB5k9-P6tWhch7db-SaOxY0qGoFyXTZtHTZKqZFjQlvqQnBLs3s_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_br&type=PROGRAM&Expires=1452685359&Signature=WJCCZ0nab972K2yl-uG0eQhyO7lQ2Vq3zrrVmZYF9rq4soURJhvyYrmn4dBmuVHRpQa87EYXt-fgtFG7Jwo2JxUxOf1nK8L0~pEhdvNvjVK4nW1qThxt2URWIhqR5xNfSli7cubn6pm5KpP-X1cJ1fQ-iDpte0lIEktqkSho6NQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://www.giftchuckleflash.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

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_br&type=PROGRAM&Expires=1459862190&Signature=ZaMr8oHt8eaIpoghap6qH6tzCfrymHDXh9FzIrkSUnspOsXL9RoidZqOLicKcd2o6l~RiVFqcHzjQhCPD3Bn6GxtxpPulWds4gdlOGhmT4ogtFufKBkqVfV4P6Ck37VlkPfdWS-VfqR0t~VxuSw-cK8ZWKpFjIC7z-XE7U-qIh0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_es&type=PROGRAM&Expires=1459616928&Signature=f3xSKr4rWEAWmAb3D3m3k01IZyMcCAilX5BZU2Epoy~szBhdErYCvhDYI3Y8UiD953ugIB1yRwwjC54Omw6Wfol6sYni~2pi0x~hkCZ1zBgWSj9~Rwn8jFdTIoKG88knr9mZAZknLi-YxtfTXZOsu2xSTpg7qERZbL1yiILyuU0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_br&type=PROGRAM&Expires=1459323854&Signature=YtxZQ-CU4E1yzTXzQmX7dKGLJSLig549jnqtUIkdlG~CVf0LUuzWEsj3z3crJ6WHIb3kdx6uPoE-DPp6V41gYuPx27oy9m1GEmEFvTtULgMJYiDj-dgTCMaw0d~Doo54vh06dYFFwnvfg7MvHzHmNZt-mGXGyw-uX4Q1Kju7PzA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1458467678&Signature=VxiUkeB1OstnP1DBCVdboKPH4bW6j7ms643v2dWi-7RQFWzJ2g~nRkIjGtQhVxHl8viX9ytc6hsVdmyx~ie6W5yVO3-QkjTAo0cSEsXgNWRWqDMdUodgqONC0qMa0kwGtAfxayO1Mn6DRcFFQb~Bd3WTK6cUUVE3Itzzef6~5uA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1451833008&Signature=X4Pk5bCXFC01NxBXQaZz2aD0PVCeuOHQdfiuxmi2xymSmasa~ZzUc7bVFrLUPKvuczXWrgD1bl4EhpOZjw6WMDBpWqI5JemhI111bONWBm-69YUDqyKrlm5ohIetPVHAbHIbhvx5P88hmgtMz8wI6g7VNNHHVhgYrPoipzjlK9k_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_br&type=PROGRAM&Expires=1456120273&Signature=K7huwTIAUmQyWr2GeLEPe5A91W~S0QOjFIdZRIoC3UEUMGW0a9NexIB5N3fmDDkwOl15vzIi0~rLJMWrwEF9oZkF2joid9VbqG9B3bevbsZ-0xRIm660iLBq~aMwKZlsUrMkkGye-Jux~m0AdM~7XooEEtFTseGUP4hm3J6RC5c_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_br&type=PROGRAM&Expires=1456397822&Signature=ZG~VOUZsL8gMeFL8~T9Sp6rWYMKDwyN-ADxbNp6p2VqZEuNWCWZUO-oWNPnbX0YNJWDgRfk~VTcEc4mcqjOXsku26uwFcP9ri9hjqIXFvEDFbAqkjUkmPpdVOkvs5OCdLLkialIswnnFzGr-8U7Jh90s8H0Lqv0J~~o13v1Hh6U_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://global-shared-files-lw.softonic.com/de3/4ae/.../OpenSubtitlesPlayerClean.exe

http://gsf-cf.softonic.com/de3/4ae/.../file?SD_used=0&channel=WEB&fdh=yes&id_file=324577&instance=softonic_en&type=PROGRAM&Expires=1454242518&Signature=Pt0x26a~99Cgn7tDaoMOoQr~8oAaP0CZJ2U3t0AhPAgT5bKLkNF81X0z-Ta70TwU6Mp9LFxDePbQUohK-Si8Mzh5xfT4s3iP~7t2a8uhkqKEg8eLwaU1X6tcfmfqewWEyL6bG26s3aShV04hnOCuV6olSBX91JeVQak5qmo4IKw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=OpenSubtitlesPlayerClean.exe

http://www.opensubtitles.org/player/.../OpenSubtitlesPlayer.exe

http://cdn.opensubhosting.com/?ic_user_id=742

http://static.opensubtitles.org/addons/.../OpenSubtitlesPlayerC.exe

http://www.opensubtitles.org/en/player/a-download-now/.../OpenSubtitlesPlayer.exe

http://www.opensubtitles.org/player/a-download-now/.../OpenSubtitlesPlayer.exe

Remove opensubtitlesplayer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.