finalmediaplayer2014u1setup.exe

Hiduluh

InstallSpeedy (New Media Holdings Ltd.)

The application finalmediaplayer2014u1setup.exe, “Hiduluh Setup ” by InstallSpeedy (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from www.bestcycleupdate.com and multiple other hosts.
Publisher:
Sekafaha   (signed by InstallSpeedy (New Media Holdings Ltd.))

Product:
Hiduluh

Description:
Hiduluh Setup

Version:
2.7.5.7

MD5:
eabf43cd69058cc3783954a96213bafd

SHA-1:
71a527279ebcf539e565435c7f92117320ab7df2

SHA-256:
2314dfac026053352aba1693f5cb85f2a914e1b0c9db29573fa0dba031124233

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Description:
This is an installer which may bundle legitimate applications with offers for additional 3rd-party applications that may be unwanted by the user. While the installer contains an 'opt-out' feature this is not set be defult and is usually overlooked.

Analysis date:
12/25/2024 5:33:34 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH.Bundler (M)
16.6.8.20

File size:
1 MB (1,056,072 bytes)

Product version:
2.7.9

Copyright:
Installer File

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\finalmediaplayer2014u1setup.exe

Digital Signature
Authority:
GlobalSign nv-sa

Valid from:
3/15/2016 10:40:35 AM

Valid to:
7/11/2017 9:28:33 AM

Subject:
CN=InstallSpeedy (New Media Holdings Ltd.), O=InstallSpeedy (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121F59EA8A6B04CAE5E738F6CB09D295BDB

File PE Metadata
Compilation timestamp:
6/19/1992 5:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:lC6tzjeUdH0pvUkGvpKsQXX61x6y5MyVMqCNDXG:lL1je2kyfx6iMsob

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file finalmediaplayer2014u1setup.exe has been seen being distributed by the following 50 URLs.

http://www.bestcycleupdate.com/c?x=XLp7lGSM61N2D0B2VkFugj6EjIkUD3nz8k9h6n7LCYI=&c=Pdt09XKUYP0kNJPzvlIzyuywfHz339E1urkfJVLhM0HyVuRMeX v4fuXH TfAbX98pcITMACh7kTXwz54t 5 nxsKdrenZhDViC4vSEsmdZhXhO8z0a85nr/wKtkwqHb&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptsbitssafe.com/c?x=gPDwZeD/71hjA7IcfLOi41CcXaZ0owNInCdNSEEo4eg=&c=faxx4AB 0CszwqN7Jpyw7ksRrxbRQWZYgH2oGHH UMq1s4kx0Ztnxq8Z oD7/P 39z IbQPoGLsUebPKktDGQAyvZbVlKM4t1pPDwQJdKevC PT9yuOHtwKKrug0p4gT&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.dlquickmega.com/c?x=5Ja5vmfskafxjDUZC5IU8mc9B6YcFMApoutnZX5sjxQ=&c=CSwl4X0Yz1F5mq/1MpqehumddR8yijPtykwX1YTK3wB8PdK5V9yxOzV8Jk0li/IZ0FpYukKxlcgbxbINSbeLQwHaNJGcxnugSVDNtFmhgEHtgk8RCcbKnxtlhf4u4vsq&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.contentcityhosting.com/c?x=NsP SC239j9KS1P3JpWcP1KQrNR2Sa4S2rYBsVL6DQk=&c=m62vVuFenyI4hmKEM7f3qcl95gHhaihXHsVV4ej59AlzabfLZKI522re//V7 yoTu/breaLu53MPG29viGAl2uRxDtGI7Y9aDrOb2VnmXO21JZ3ekXwIIhMFZw7UZweU&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.universechucklecycle.com/c?x=dmKVFofe Bsns9M gict BnSGdfc0j5oMNFk3hAwWz0=&c=wDyLsojt SoBA90TyRyNL7RueYOAlPBohrEuaG9UfDBe vdLPstmr 3zqtPkKWjAqQyybv7HHbGo3Tjt0aggqtPudc4JsQRjNS6lPYJZM7TUkk6xJMcmSvBpabG3BoCn&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.appscontentsoftware.com/c?x=n6GpXiVKlQ/PQ5c4aPcEgkiS3c W7R4rzW3IG772X7k=&c=KCK/EJ1zFywD24r9RhpkgEHd2IebNoApiX7QuYlfqj7v3zIWWW/vxzk2d9imXyJ5qDWOmVzxTd1dC5ORzpokFoF6j3iHU9artG7RsCWdRVXjo3RvMPalMcq13sT050He&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.guarddlnow.com/c?x=QI HhEQ0olk/KwjeyOxztq mQiylGGNNXdfgRmi/1k=&c=PyQ1yt7g7qP9EV/M3M8B HluCqe0VZXpgyiAs6xR2s0nWKskpRcxNUmzj N21jWWaHfvJ2YA5FOYHiR4XBGBglSF779pydmeIrQkR7Kye2PLEoI50SypYmuxOzwgjkcH&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.contentcyclesafe.com/c?x=QQVw0d7STA/dYLvsOt1dlhL/zkUjn1kUFcF t7Jtq0o=&c=ktHmshU6S0isx7NVIld5CRfhfwX2oVgpc6G/nlTPKh/vGko2btuwpAP1F YS0gSt3kiOniLDNoqhZMH10OGVgaywyX9KnK0HSl2HqmAUdsuwFDbt79tDezY0y1 yCBa8&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.ranchcenterbyte.com/c?x=nd8t6mqbtoG17VZYbSjyDi 1umCdBBr2A2nRClaSBPg=&c=wxSxzVy7zbor3m2NjT 5N3gryS9E OAuvXvbrtbjTC7tuqAG02Zk C dHYn67v7pDVjyVdV9SbVeFylwVpYQ64UXoQlKQWAbotQMelthM3y332OFNc/cFoeJSnB6MeBw&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.factorynewlaboratory.com/c?x=b3KLsFMnRjLMUfO6qdcNxqZR2XyGIsgZL/BlwZTfqNU=&c=3ohko1u8bmwExm5Ld3VOUHqlLJ3t0mDtJsi6IuVyorleO4iy 7JfpU9lTFstoEQPjTXISiQXc5vyt9RpT7Jj1Rhj3988bsR0g70xG7 GBnJ2DxMv7WZc9bsaqYOoYmKv&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.citysoftwareapplication.com/c?x=70lnXRmFzay7t0CBsCv65J8N62/NVTZjIPdeGzQMruY=&c=WEs1 IuETz0BNwbGM8EnUnCFFY6EE62tA SlU7yfgf36173jHyPPjXmQIhvQqwPP2y1SJ8TgQMW k66Ncu 4UwDXl9rJlRMkpOn4KU2rMKIGn SFL/XpSbgMNJ8jvoay&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.deliverystocksend.com/c?x=AmQPQyvwAkA6aSyMvYrgzywmF3rs5o1 Svn/J1N7NU8=&c=qAVKi8MJqlXvC5U4ZjqNT/c9M6deLy6bH1AahMUwGx NDxye0GqeX6G6WYjWLuIu36DRFcPHEDFTpDI 44kUkHQcBUw9EwVynib1XoLm1nadd4rJqHlZSaCX9gLqxW6G&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.universesafelaboratory.com/c?x=Y4AqerQruPnqlZDxKTukRVJe8AgV5dJ6mLhWn2jD/bY=&c=cog111bYYi0K7aQ V8anFFUGL3Fp9W8j4oHMIzaFufx8luuuiwfRhFsLiGmZA9OesuHSFYXluOUDAcmTeCKP OZMKPNHlXptRT VcCcYsMTdj/PebP4NO1ShnD5636h1&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.headcycleranch.com/c?x=r1K5iGXR6tYN1B kEZY3coRvTSh/DhyL07brK3aIboA=&c=8FwoXk03OjTy5TwLGuIN 7I4OzkKAiY2UgezENgbUkszF9JjnKP5EYZWyQsD/C19gOMb kkbEFtHLFgFyrKwTTlUZC5BPOYJVSpu3K5M6LQpt58 bOubxwkEIuOdt/ms&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conecptbyteshare.com/c?x=cLLtHMgtjaOFBb73/auRDiVmEVXIAPTMDxh/XSEt5jg=&c=PGV0y23SYpRqLgLHZ3AMQ1YS9DoyxzjJ Uh8pIJyylFiE0Hy5Q4FJUveAp/x8eNIoAf8JHD tdxRK884pCQuDCiHd0YvpZlTKsU5odEfbMknrJG/mbmKMmKVVp7RhGJl&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.vaultsfarmdl.com/c?x=TFK29no7pf12GVWcz5pb DJHH0G TNAHIO0EpVHDzvw=&c=Nx4R4KNkt/LrSM4Z0yysMtefoAW1n8jRsCCt5is/pzsJ6a8cAbmlb1nmrBvfhT1v/pz1beC4HFnFIgyUj0pxWBiSYJYItlbsqW ibtrv6eXFKfjWjZiOBcvzM/IA2m0U&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.metasignflash.com/c?x=WMDKbLQIAlvace16yTtZQREdDCck69nBi9HW5h2xqGw=&c=n/zOxDfjN5paaCiKABfVBPnMLbRsQ23TR zlTcCJ3QBGF/RweYDQ47cHcpQBaohBniRZKLHMo zhvixi /Qt1da3Tg7VJ5ZOOWjo8nig/L3bSLU Z3IVrZh1gqIQSE3&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.chucklesignstower.com/c?x=4BN9BxMX6wnqQhrEpuweDm3u Y0uk4OfUtOpddGB7wk=&c=8wd1q3VczxKTXUdDyE/uYszniAxUY/KDFsORHh3vyhGhIjsWunk2qs4aGv81Zew47pZYSpJSJKwSIiH3BDRCjXyLwBqle6I9Pb3ZOZ/1v0aCw5uN5nd21w0yqAmt6aHS&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.binariesmegaapp.com/c?x=SXH 1NLiqqEZFDRbM/yL63AupaUk0t3up1YAtAolcog=&c=oGGWx6HvTWhP8Ye0JAXSgCoQano/j8dqfQwxQHzqVhWqSaOGgwhEwEUjrFOOm4Ihhx8/jAE6V6HY6tjAm0o3a6B4om3UK93YBInGC xr6BBS9vwYLslRJA7esHksbtu &downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.applicationmegadl.com/c?x=FksAONkXTas5/Vh Y5SJWA3000YIwEDhkm1bDJ1oigs=&c=MeRRAtNyrUDshASkSKoABdfK8eo7kp0tABSTht4PD9W7MYXYzggNFkQXGy9bsDf8Sc8a4xGRM9p2avGJOSB PYne07yCUbrZb0ki8Gekep/AjdiI 71S9919mNOGBkEH&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.currentbinariesuniverse.com/c?x=DTKQ/IUIpHtqMT7Bs/hc0VELP25zLT9QkoIaj0WAN9s=&c=myqxY96FLfuZNJE5dcZ68RbXGFNTRanYv7i5Ump/Q0g9coB7jngbL5I8GCX1B65c3V6W2AGKw2jczwtnmPS/MdQoFP6Nonx55ioSO0AWSx9Z8zKUGS09I/m2dafgUpMP&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.ranchcenterbyte.com/c?x=VVSw/h5B7WSzITix84C8J5KZIh0jb99n8BNFx2vHITI=&c=4giLW9KTD0Le3x/PZinRUEzx0ZZhfIpdC5zuvobKFFGzVvYBOLHJ6QWgCPepR2cgDHl8Sz19 5cnvFQbqV5PPXygLhZWe3nY6w0AlWdCdVLiutN0MhKPC/rItpQ7/lus&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cityconecpttown.com/c?x=lqsVQ/Lb7g6ZNh AjO78GafMN1eUFMq2KWWRF2BDAfo=&c=hZw3NWIYuAyzOqFk0pkGGy8vCNhmKt7AMwLR256B3 694sPoROmIjFPVniJtLv745l nYFVhdKKGc2BlyQPlCnLu9OQ8pPnh7Jp9lvcgSWDLvb8DacSzjJbaTMBc/b3m&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.applicationsfactoryfiles.com/c?x=xZjWz1PyuT6EYvgKj xAsmKHt/hrZ YcBu7JHlMYEiw=&c=0HCBapSXyCiKUh3yW3YmBAs6CgmtykXYeUJmCEmLL/eNUOb1RvsBFDOOYg6W/B919Cm2HRBgflGndkCXmWDxTUub9wQ L77czUfFuxIfL40DtkGu5L/v6ApScME8I4PM&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.universesafelaboratory.com/c?x=TvkyCmc/HnTib9BwVblrF/ ENTcrKR5cU2QEEpSQE9I=&c=OqRCHdQtsb85Sm3S7vfs2ts2nyKRfX42aAPjsJAaB57OFqfY49GxT09BrfHZR5/S9toijz8lWgVJZlU5IvYHs10YYPNnZv/E3tPPe4kBBKou K1LqOwmCWeG tsDxN38&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bodyvaultclean.com/c?x=lripA8cv4haPuyDnXccR3uN2QV7eHuSpnyTVuBTlVa4=&c=MAiMGSafZEzMVFvSTxr3kl8dBH/q1BQqwj8Qzz6klqLo0AjiZQCGdMB7AcwKXT3hvgAMzBd4APwcqos4/dfOfYKx11W22KLYPXTwm3AB3B91A5NQ5B18vXhahQy3GMEn&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cityapplicationssend.com/c?x=ttfHEI0kJOAwuZdJ7oK6Q0vPBTkokkLgnSyenJExLws=&c=CHZGaYnX1GeGCRrltuiaSuCH0dtcrGfEN6Y5BgUx Py6xVJunF21v/a3gIcsskZVtg56qWCJN80 u8acs4prXdTN8wy8a6owDC19ePgT1TWqdl1Tc4gjSknuh4eiVoCr&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conceptssignheart.com/c?x=Baf21h3DrJIFLZe0tS7s19mWGMIDgmMY0Zg62x 0jZo=&c=tVL6yFP/6HKditUV8prYJnic2bFsUvcAD4Dglwy6Q2DhxvHAYJOEt0CdVc/Pq1T dvfxxR3Tm2UB6wseftRlldru1ngQVfgIpQ4Ea1BLQboahWtDpucWS5haU5XH4W4a&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.conecpttowersbundle.com/c?x=Q5iJUO2NWReyUYHlGXi DdlgmiqUuwo4juCiNK3Xgh0=&c=34oyIsJkvWlqA36P5NqE8miL5UPWeNiyOlxqXwH4gow/q0CcSs/UGKnC5dYKZRzeKPxweRLM7ESdo7Xn9lpIyLapDnC9dNZhYSEOSHi7cVdoqwTxS7qDQqVRcWeV0 oD&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.updatetodaystock.com/c?x=EAfb8xxQC/rD8HA LZyAailzqlwSUjPAsJ6zn1AUR2Y=&c=DnaxmlhreiRdI6dzKK07gUaVfYhBwH9i bWtK5DpyKiSbOfOvJRg4pCNNVD0NnYuacZIkB5TX6mOrHByUrtFMXunUYiGZREImK7EiXoZzOYyLOXOOXYCbNiWBoHrdbxw&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

Latest 30 of 132 download URLs

Remove finalmediaplayer2014u1setup.exe - Powered by Reason Core Security