» finalmediaplayer2014u1setup.exe
Overview
Analysis
File Details
Downloads (16)

finalmediaplayer2014u1setup.exe

Hego

MaxSpeedy (Fried Cookie Ltd.)

The Fried Cookie installer utilizes the InstallCore download manager which may bundle additional offers for various ad-supported toolbars, extensions and utilities. The application finalmediaplayer2014u1setup.exe, “Hego Setup ” by MaxSpeedy (Fried Cookie) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.

File name:

Publisher:

MaxSpeedy (Fried Cookie Ltd.) (signed and verified)

Product:

Hego

Description:

Hego Setup

Version:

4.8.4.8

MD5:

73966e029d89153571c180f83dd83da0

SHA-1:

066fd5faccfc2e5e96b1394042cf6ad47f967db6

SHA-256:

87233aca27e708e98eeca45d8c7be394a697e5c87ca8c00e1827df728b9539d6

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Description:

This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:

11/15/2024 3:21:41 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.InstallCore.FC.Installer (M)

16.5.11.19

File size:

1023.6 KB (1,048,168 bytes)

Product version:

3.3

Wizard

File type:

Executable application (Win32 EXE)

Bundler/Installer:

installCore (using Inno Setup)

Common path:

C:\users\{user}\downloads\finalmediaplayer2014u1setup.exe

Digital Signature

Signed by:

MaxSpeedy (Fried Cookie Ltd.)

Authority:

GlobalSign nv-sa

Valid from:

12/17/2015 7:11:09 AM

Valid to:

6/8/2016 10:06:58 AM

Subject:

CN=MaxSpeedy (Fried Cookie Ltd.), O=MaxSpeedy (Fried Cookie Ltd.), L=Tel Aviv, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

112125C58A41E827F13C76AD2A1D648B8808

File PE Metadata

Compilation timestamp:

6/19/1992 5:22:17 PM

OS version:

1.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:MrMkm71ZVBFD8jFFZdJG41wiBAgHJ645iIkLOXmUGAoshfb:MoDFw3EmnWgHJoLOXFGAospb

Entry address:

0xA5F8

Entry point:

55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55... 
[+]

Packer / compiler:

Inno Setup v5.x - Installer Maker

Code size:

39.5 KB (40,448 bytes)

The file finalmediaplayer2014u1setup.exe has been seen being distributed by the following 16 URLs.

http://www.conceptsguardbinaries.com/WVl6OTRQV0p5V21SQldWcHRaRk52TjI1VldEWjZURE5XY0dSdFN6RklWR3gyY0d3NVZ6WTNVelZGT1hOSmMxVWxNMFFtWXoxWkpUSkdkRXBJVnpWcWNXaFdlSGM0TVRVd2FrNXNNbWhEZDNRbE1rSkxabkZMSlRKR0pUSkNla1ZOTm1JbE1rWXlRVkphYkVKQ01Ha3lia2R4VnpCV0pUSkNWVlY1ZDNSdVZqRk1jMFJvTlV0WFUwRnBXVFp6ZGtwWU1tOGxNa1pMZEVWdFpqVlVkM056YnpWRFdWTTNVVUZwVkNVeVFtRnNNVlJGVDI0MlNVMTZXRUV4Y0ZsMlIzUkZTMGh3ZGxWdFdVVnBWbmxrYkhacWExWlNjMk5OUWs5NVZrVjNKVE5FSlRORUptVTlNQ1prYjNkdWJHOWhaRUZ6UFVacGJtRnNUV1ZrYVdGUWJHRjVaWEl5TURFMFZURlRaWFIxY0M1bGVHVW1abUZzYkdKaFkydGZkWEpzUFdoMGRIQWxNMEVsTWtZbE1rWjNkM2N1Wm1sdVlXeHRaV1JwWVhCc1lYbGxjaTVqYjIwbE1rWmtiM2R1Ykc5aFpITWxNa1p1WlhkbGMzUXVaWGhs

http://www.presentheadbody.com/c?x=zEyfG7NeT4l0YboUy9Fk7ZXLrXFxo moDufPX1K/HI8=&c=VspGqQccwDzhZYvqa2J7YdHiyY8kORBjxIU uX9WJYhZUpT1GXG3spDnV2/fITkrgYy98doXLzmjNzSVJKgM5qa10nZEgGNskB asDY2QMShjJF HUXOl10mWztg5OlfdUiYZwSi1NLzq0ANbxd72ViMBvXPi7luFodqe1ASsNI=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.com/WVl6OTRQVWwzUjJsek9IbGFaVE01ZVhKaFUybFRNMnM0TkVwS1RGSndiSEpETjJJelUySkRURWxTZFZaeVMyTWxNMFFtWXoxRFFWTlRhWGRRV1VnemJFNXhjMFpsVWxaVWFsRjZNVGhOUW1KYU1raHhjbWh2YVVGTGNVeFdWMWhhVFRReVVGSWxNa0pFV1U5WloxaFpVMHRLTW1wMWJqSkVlbVpHUTJKVFR6QmxielJ2Y0VSRWFXNVpUSGxwZWxGYWJubHlKVEpHVDA5RWFYcFFRa0o2YkZwUFoyVXdNMHRNTjJaT0pUSkdRME5EYzFoWmFtWjViVlZyTW1aWU9YUjJhamhzUmtaMFlUVkxPRmxJYkVkbVUwRWxNMFFsTTBRbVpUMHdKbVJ2ZDI1c2IyRmtRWE05Um1sdVlXeE5aV1JwWVZCc1lYbGxjakl3TVRSVk1WTmxkSFZ3TG1WNFpTWm1ZV3hzWW1GamExOTFjbXc5YUhSMGNDVXpRU1V5UmlVeVJuZDNkeTVtYVc1aGJHMWxaR2xoY0d4aGVXVnlMbU52YlNVeVJtUnZkMjVzYjJGa2N5VXlSbTVsZDJWemRDNWxlR1U9

http://www.flashhostingapp.com/c?x=k3ChJAp3OIeUIgkTGO73tZ0FoLcEI6Ne5WhbKWLzG4o=&c=bwoCbYEhjyxZEPZZg1puofkSF1zbds5r60u/NO6LL4E37vnHq6rQ8gARCeWHqvVrV4P7XQYNPug6pK4lcBYT6dOo2B/i06o0u8wh/wjKyDAu7tOsK/gHpan PU18cHrdpT2WIJJ1L3i6/TKAv1seikuCguoh5WuZAwdcEhCJyY4=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.presentheadbody.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

http://www.conceptsguardbinaries.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

http://www.bundlecentralsign.com/c?x=2Ojv58s2auZFlpthg7KozYrEU8jjxkaRBoHLQDAhQxE=&c= ZWLetgUcqUUNDYNPnU1LvvGyZdvxXUgv670 dozhEzSSIvpJvAtlMoM WcBZmLNnXPRY9fX9L6pIW6YlEqCB5BmDKObnKJ8Uy1s/z41MQgUv9UehZ6849M3ABx8zj p5POAUKNsYV7t6eX2tdxyWz7h0858/vcKOmZ3JDmFX6U=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.presentheadbody.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

http://www.bundlesheadsign.com/c?x=t fZA9JUEnvDO7iaejkSu96Ba3 w3OwIbEDLIqhF3sk=&c=ZK5s/Q VdUxzBTcZhU9rPAdwas1OHtPW0NnuVGdqEf7 zSSQpTvgxiTHL61Suf13Uqrzd6A/uxEbchbCozgO0cLDtHrX5Gc8rm 4UgpK6Li4q8cvVyD08dFMZytVHS/zmKO4Nv8wKQ5YLOp6oAW9u3hf9WN9mfKYX72jiwY2 sU=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.flashhostingapp.com/c?x=uwSnZ3FUzqhaCaWonTzXSaaGQBMgk5KDAbsk 8Im2ew=&c=dNPoD/HfmEBiwM6DKg/2IvoWVd95G6pDTC6fiCGyC3DgTf3icgRXWz3ESFOaSLfVwCs2BzgBzcDnehqc1VuHyjV4TL1Bk84u/QVMLpdhQYKPOmPIekv0oXJ1cmJhbOXO fxHs4gIPsllE6h/KCa2G68axBq 4S07KkI3GYqXbbQ=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlecentralsign.com/c?x=4pF63I4lS6BHkw1cifO9jGFAAKoQhjzQ5vsFLOV8bto=&c=2aZvMFlpRwa4Hq0EozrNB3q3ImBAg576H7YrM7bQ2WPg/YyGCUbqj4xKB OnfKSys7nVPrbp9hhlbhTWmI0cCRoE05NyO yCcYGpkcUinwu4yYIQkL43DtlQwiKeKlmdIpMZpSnHuvaVBfTcrBeuHgUDR02a08k1tYV9gRrK26w=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.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

http://www.townhostbyte.com/c?x=WS64CeQpRilKYtg3gwlJML09kGIlHO4drnWFAzeuEwY=&c=HPEYGH8lFs0Yd8XnpuV2VgF7BKj1hHVmlLtxEWcE9e NTGjmVhArI5JOVGTpQPO57k3Vv9XXFyaADh88KS1ESJDXT5EDtmQp XjOBDOAwzvf3YV2AHWfvyZzvqkC6rU1PXLDmcIevcpUkZ7zJSZfWlndxprlYVs7wEjWLf 57w=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundlecentralsign.com/c?x=0dAF0qy3CG3qOb8z03sVimEogtkPoRdLWcjtCUmtE6w=&c=xkpd5iQiByhU52bZtwNUf8n1gbkFa77/70G3MqAwWZ5ioBbSUdDXLyve4v/4OG3M027aIFYQwRDDSh54pJ4mtDOjjYxnzGWD0zmFRUctie9/eHdNK40cQP4TO4JESbfv6sEZSoA3jnqOxiQveAQ2ZqsrmqOgBC6JM7T0sMlJxPU=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsguardbinaries.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

http://www.townhostbyte.com/c?x=1fJhUkVPUgWBEfz3DiR acuTJDq6DTgIolwamjFgbMw=&c=ipIbpsHDEYCZ2uXGTbO1bnp8O 1dkncYBbCemU5xj5ZM0pbZvd5X7avvzQ1OhmeOq5oqJq6G8sMjuCYnseap6wYcD/ZiDZJEE2pe2XIdagDPtBGOf47t06bAw0vVPjk0ppkmZUcffklHZKde7mC/w87c4DSPR2P3BGdPzrdFCms=&e=0&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

Remove finalmediaplayer2014u1setup.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.