home

finalmediaplayer2014u1setup.exe

Internet Prog

Web Internet application

The application finalmediaplayer2014u1setup.exe, “Internet Prog Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from www.chucklefactorysend.com and multiple other hosts.
Publisher:
Web Internet application

Product:
Internet Prog

Description:
Internet Prog Setup

Version:
1.6.4.8

MD5:
23e4bbe96fde809a29f6b9d28fe83cbb

SHA-1:
ec7af1eb5ae073a5bbf4fb31d589bc6828b3ce1d

SHA-256:
0c00bf6b0e13b9d4fa0bdcd6f4b73a98aa05cfa7f73e3d34fb5d6d6692dda7f6

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/16/2024 6:03:24 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.installCore (M)
16.1.10.16

File size:
996.3 KB (1,020,244 bytes)

Product version:
3.2.1

Copyright:
Application

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\finalmediaplayer2014u1setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 5:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:bdThZZN2X9qNxxOPoE0dXhCfk8ptRUc6Cr2NvC+CzI:b5Jc9wSoXhmptR07vFOI

Entry address:
0xA5F8

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, CE, 8A, FF, FF, E8, D5, 9C, FF, FF, E8, 64, 9F, FF, FF, E8, 07, A0, FF, FF, E8, A6, BF, FF, FF, E8, 11, E9, FF, FF, E8, 78, EA, FF, FF, 33, C0, 55, 68, C9, AC, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 92, AC, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 26, F5, FF, FF, E8, 11, F1, FF, FF, 80, 3D, 34, B2, 40, 00, 00, 74, 0C, E8, 23, F6, FF, FF, 33, C0, E8, C4, 97, FF, FF, 8D, 55, F0, 33, C0, E8, B6, C5, FF, FF, 8B, 55...
 
[+]

Entropy:
7.9134

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
39.5 KB (40,448 bytes)

The file finalmediaplayer2014u1setup.exe has been seen being distributed by the following 11 URLs.

http://www.chucklefactorysend.com/c?x=s4EV12SQqugeCGKa/MZmgpveMBFji1 wgyDu5fyJMZU=&c=NSjUFHo/uyxAWw/uuXpZZ9V3Dl01swGxfut/XHODbkCjmP0CmCgrVtJW4zu5h3ibYLUXNu9PFo5j2 aoq8/kA9DO7LbvHGfWPS9AEyps w2rnM56Pzd9lUBcCcZ2WTAm25lRs9pt7mKG8qoH5Z0/yzSUbVGhaMhphJjX1kNIPdc=&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.packagepresentrepository.com/c?x=B6WHhN37oI9fXu4kcGLFEkep3JGk8Wv9rGya8rorYX0=&c=GpP6hTj18nWfVUD4eIyfEDszqpwuAPkjpSc97QjEwSxEH1Y83A5I2nlYs/dM9CNX6dgseuHmN Q85AUSry3hlB4WaUCo3MThReV0dYd0P4UYlTRcdVe7P UtFZ1lmPMzlblyz50Xezw3S/AoXVvMbjz6cXNqqrbhNuuipEVHWUg=&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exeç

http://www.cycleclearcontent.com/c?x=rVuNX0jiL7MadiG5TOvwhcSJOCwOb2PmOKxt6arXNIc=&c=1sVWmoapF5m60Kyusd2ZGc1ogSWub/7O nNHYzxBNnt7jKbJuQZ9F3QcrSxCveDv4aXzCFuz8cSrESZqqYCDHVjW5ZwkKt21M7MMY6riQPRh3pvG/27LHHEOOdR5bZYq07oFxCSL uRTZvSJsaZTPvj6UyT9/Lt6F1 d7A3RYWg=&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.bundleapplicationstower.com/c?x=4aA1QzgPu51/TObHHUoU4OutXKqBmE3 nntnTh2gufA=&c=4mW9eC7KXwQilqZ14HiZ69XLHb RBItTIJrREZLnRMGZsdQnZrfygkmciSgbipGywmamo06Occr9sN76pJb3dsJ1PL/TPRV/OqCkRLZj1DvS9MnN8mdJ hy81aQE/jIC99AeCyTJBek6gKTTM3wSoQ==&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.cycleclearcontent.com/c?x=kzGbQqpQySVkIvEPg1MPMeqBboR1S99c5DxFEr/va3I=&c=EIISMBfeXPtbtgB3ysGBYV8K9ZbDG/5eEyhwcoTUIRzQwBzyHdKOr/ z7HKYaYNdYZCmAGyj99sw60xhZARF9kyfBNwHBMN9Oc7zJII9tCb 2onkTXzFKmYRwNzoXByUlC1QeVAciOtxMDpcbmdDf1SfvQ/d3OqERxi8hNHFw9Y=&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.grabbodytours.com/c?x=BpN/5dGyHz0cVkcKco30Oxmxft60SXFLk5G4K5iM4gA=&c=UXhGNF194OF0uG3DbTAdQ0jd8/HpvCvgUaZKN3KJ0CZBzAlW2Y7H7JQRVDnPCb Os1hgCRqnRBYxf2h/ec958iPbTHr69RG6wNTRER W 0jlvKQ/T5CCkXzP5 r4/DsJjzbLebpK/RC4LAid8BNJ8w==&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.stocksignsfarm.com/c?x=wLkgfUV5K9PtBCCFNqUp/KEHmV/7c7iJsL2sAt69wb4=&c=zwbmEwy2HstfUSjNPjw KJRBrtEe8U8YTLTMK0n/HdKr876uWrFQlogAQFmZbR9gCtXW9S/s8dvcxV uRKMOGebPhmlJgDcvEmSZ/yT0bLEMYw9LohcWIMMg0FsA51DiKwiXXGZtvfTUOhrBbqhtWJoou961yC5G8MRBkjDZohI=&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.applicationscitybits.com/c?x=uhSqjjNhLSfThF0f13pEghXwmuBrjMN9W7Il758yXls=&c=8vY0EfbzN2J0FB1idA1 ULH IuedHwTTJsz5K ZekSji69KZh3LV466LT75Ei4wodoCu2VEAGdaAd3C2Z/fJqZXNsOaDi5rtI3OWvUISPWF0Tca/pApKYdyIifnLDgUcrPj6hLXgJCi9ZzKXykhJnsuVc3X5CgBNBFw6nElrUng=&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.presenthostingfun.com/c?x=AJfxpd9gDcQHvWufhQoRfPzIhC30KJ2WyqGDiuTG6wc=&c=wQCJwvd1x0llCpOhm2nyboTSl/gA6XL7 OWw5YcH2cZh/IMxbSX79qwvyNFXujLIuBugxERbTj493PLrzm6KsuDE6zuPsN913g9wC7Z2ERzTmzvCWrPKSonhm2UdiLDgML5qm9N1XFLcA9IO6tf4Gg==&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.capitalhostingrepository.com/c?x=OktSZDJlqepPzB8Feli/of4syeO0O0zDk7pG727ZdZo=&c=QTXTr9b0Sd68w7TGij3rXJGRwUP62llC3WmdWobiyxTNVF2E998xJtK3WFUnkwTxw4yGkS JFc02oP 0OBDNGVJ9sRuFKKkVTXxa ZEezPzoYWdSPXx8JlnpHfCsncPAhWoZLEo4sdI8Pl79kvyAjg==&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

http://www.presenthostingfun.com/c?x=gw29szDqahb11EwQSOUacEBA8m0mb4IB3G2RWKHRR8I=&c=MKU9N25O2c0kKEQwAqU0hL9qGNWVLPqHRlhfdJx4U4wDRi7BApV2d5LOP8K9AUR2K6kgjLDPFYu5zmp6qWEQyidjhWYFO52yshvnwCXA3eYupOtrctHc3X8q6qFN84 P1uDFqYj4oROqvTaBm3u8uw==&downloadAs=FinalMediaPlayer2014U1Setup.exe&fallback_url=http://www.finalmediaplayer.com/.../newest.exe

Remove finalmediaplayer2014u1setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.