home

uplayermediaplayer-setup.exe

Full Spectrum Interactive

The application uplayermediaplayer-setup.exe by Full Spectrum Interactive has been detected as a potentially unwanted program by 10 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from network.adsmarket.com and multiple other hosts.
Publisher:
Full Spectrum Interactive  (signed and verified)

MD5:
84c3f956fe30c4b6c53badb9f35cd251

SHA-1:
298e36ee1eeadcfa98fa918290110652893e7ef7

SHA-256:
930f2c74af03ae5c3fc294c33abc96d1b57dbd648261c8840c2c839b42e0a619

Scanner detections:
10 / 68

Status:
Potentially unwanted

Analysis date:
11/4/2024 5:02:36 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/DownloadAdmin.AD.16
7.11.104.230

avast!
Win32:PUP-gen [PUP]
2014.9-140509

Baidu Antivirus
Trojan.Win32.DownloadAdmin
4.0.3.1459

Dr.Web
Adware.DownloadAdmin.1
9.0.1.0129

ESET NOD32
Win32/DownloadAdmin
8.8852

McAfee
Artemis!84C3F956FE30
5600.7135

Reason Heuristics
PUP.Installer.FullSpectrumInteractive.Y
14.5.9.20

Sophos
Download Admin
4.93

Trend Micro House Call
TROJ_GEN.F47V0909
7.2.129

VIPRE Antivirus
DownloadAdmin
21898

File size:
575.8 KB (589,624 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\uplayermediaplayer-setup.exe

Digital Signature
Signed by:
Full Spectrum Interactive

Authority:
VeriSign, Inc.

Valid from:
6/10/2012 8:00:00 PM

Valid to:
6/10/2014 7:59:59 PM

Subject:
CN=Full Spectrum Interactive, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Full Spectrum Interactive, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A1AEF489C94F2C514EA16B9BEBCDEFC

File PE Metadata
Compilation timestamp:
6/22/2012 2:07:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:yYQxt2ctKQEGvjITZD+jcEckHnyudpc5y/zDnYDBrfw8Ac:ylxIQEMIT5dAzc5y/zUDBrv

Entry address:
0x333B

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B0, 73, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, C0, 70, 40, 00, 53, FF, 15, 88, 72, 40, 00, 6A, 08, A3, B8, 3C, 42, 00, E8, 2C, 25, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 3B, 42, 00, 8D, 44, 24, 38, 50, 53, 68, 43, 74, 40, 00, FF, 15, 64, 71, 40, 00, 68, 38, 74, 40, 00, 68, C0, 33, 42, 00, E8, 1D, 24, 00, 00, FF, 15, BC, 70, 40, 00, 50, BF, 00, 90, 42, 00, 57, E8, 0B, 24, 00, 00...
 
[+]

Entropy:
7.9663

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file uplayermediaplayer-setup.exe has been seen being distributed by the following 25 URLs.

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=-dcxwqeX1HeMNKUcd5s9W0dC2nPCG-YgIRKCZHKIVa4gPt4TBAaZPIskpVXsoUz2JgYvfUjVJnzD2yw5jFTuNl0KsF8s_7NMmEfEyXHJngAYBztn7uL2rH9eME3CbvgIg6G0hUQYexOoGOi4NNReIKLZfVFwuEoNYY88rLcSTOs9UEgDRsROFE9MxZvsQvFQ4-2mFBIh1whINDjQajqyL_wccX3QTA0KxYBn19YtZFM_e6iHO_2AmZsFvB2AcK2CyX1HGwy8n0Srzcj5Xy9O72giHu8LdRcQ0lO9WfE0cekppR8nI-djtE45-X0TAilF-o9Z-AZyo3MaLdfj9PNlUGIfYuGfuTFNJz_8Avp6BCH2aGx6C1FkYQ

http://s.m2pub.com/event/click/0/9JIjM3_xE7hwQUFcBBOTY-ZuC87vrZG1CYlP1smK85XsQQbHh05KmYxSKQNewcy2gt6T4qxpu158_zTFuQXQR1OG8ef_L9xaBSQYJd4A-h1ZwyV_IX__6nhFqCJo4URTuQTJ8NwWyG20DK7wGXET-UYoqQu08sYzNgPbLiXzqQnDgu14jIv7r0JS2mfvRk6j71JhOnw6cqU199kAl7uUoar8hYILAR3RdSh7ZpgLlq2OaX21jo6D2Ziq0TZ_pFwYHkEnq0naFYNMLVTmgHLqBv82N8CrogVmZX4AhWZKtN3FAJGXqfIalGH6bxfy-E5oyVvWZHS78dhOxPF7i-CE3bdSEFpGet50hOkLaKmuY0ZPxCjE5s8_7w/.../

http://s.m2pub.com/event/click/0/7Ff_WlMPjK25FJJg9f0PRi0ta-htQ9JK0uF-wKjL077Qd_qoIQvqKzxN-ilmMMz8MVph8CS6J7fcMV6YDkJ2hB1iiXdDQH4sBVC9uaL6QPkSfyeTRoYgb_-Ei18_SmEz7mKuJtkuzo9GQn26T5eRn0ABfSvt_psYPDycVirKZv25tJCniud8RLjYNCKH9OCXH2YtIL5PFK5necGyU17BAwetdKWcb4MloyDb6x4Aso8sQFqf_TxX8Tsm5QqmnlcSmYsjIlyh5tU82Zu5xuAmf8H2aXyZY5x7ursYsZoL9E_xrTmYkHayybKP9SEYSgqAHdIgk64Im5oVl_TkGmCtJd0/.../

http://s.m2pub.com/event/click/0/m0sJqhhmq1wYSd9pylviiV39w1Rpu7fj9V6v2rhdnWAG2TXCtJPLUgFF5SD0fr5XyVeXOpL0NDTkad2jIgf-K7I64OnBafNLF1b4WyVO-97NtOuXV5SiX_HTa8ozY_bfJORm_kYOJAfHjbluRGg2xPEGDseGVPZdvq80NKmZVlSNin1psHfhBxNBcDu2QPJkr_y2ftQDH_Vw4HNz968c9uaGSBI1mnRrxxudu_PlGyIelaJOkXxaTG1gy_3uZVe_Z7blmHjShdldel6DYFUyGsePFlHp77V3ROq8hEluZuZ3iiTWIlpSWIZXfJNf_V6JX1LoGl0RNCSEtRR6TSc7Gl372oFxrXa3RJY_DWlRq7speIGtrLdvzQ/.../

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=0DlwbIGl8zt5llCnPOq4w8FlP1_AT2quyJ_cI5y9HffY09jEadzE7NBohljeHUnA0VfmzVoGn5hwq-5klCpokyNn5pVf8cKNlKRKqec9BQr66KZP-KlhpPR_yg_H_cwbwDQbI5xTy9V_3iLgFQMZadUuo0px6VHYDQ3KcQyYcypxrAllibrCzI85y2NhGo-k0eD0neIkVpmp3GfIa4ryuOwP2oOZcug7e1XZIqMmUqj4RK4pzaap2Fi5xdM8eHO2IAJo_ewBxEFvpVE420DE3I-Wi5LZlRmvJKrYR64a3vBoy_uk83j0MnAZGNIuPO-4ZFRhzfbcDaahhKZ929JrVKFOo8Gknp7qVgU_Bhp9baRNj-xYz474Dg

http://s.m2pub.com/event/click/0/CLOnQp72_nxZXOUBUp_MvUfzRmxLMxlBaYnb49nZdTNZyNfxwUpJyddUZHsbhShyQFR_3l8j26f7LP4QRU4M-w1tmZfmiYq1LrKwXn9MGyr9Flizojp3WEj0er51Mtp4spi6T9eqWLq5GAwreaMZWUtbHK81HnVx4aafEL8-xOJo-jGXz_ai9gB9CtMfs4Hk0xbfvMXYC0R7vnLREZIpo0u21LLRrcw5QxdE0dN6VK79dGi5eEFCKIJzDeze4KMzr9b04oM6JCjQPpoGN6VTBb6IFz1l2r0-j6r__suVJt6HT0iupC8opDh535_zODo-BtWj4ZM_hQmZCcOrxd3NnZgIFeLbTdCdAck7nepGmKToYYpzBzzQ7Q/.../

http://s.m2pub.com/event/click/0/eJqrRHPUiS8stk8CaMBYg79XlPpLrrXuXcnBhTZDRPBNof5ftgObLk0IIuS8196TdBY2NlxLsF0cMWT2TpTDKVhcSywC79X0P_1sjzoYHj_UF5MKP2qPJYooldj0MaFdnHHMCc7166f2Q8BuVl4pF4NZOM67m-cOEQDaatyA4Ad-l4rC2M2_1LVjqJbGlzFJVW2ffyWT-GCA3Ww_XKE2erMP4nCBQCXV5R4vUAEC-ljL_CLyPk_mptF7OadGWi0p49TTfMBIx7d9aMzbG1L3umqlspP04cjykQrxN7q-865rnk_ZeqNecPJAVZ-81MmApAvsrjFXAQuraf_YoiWe7YwWIHAe0zquNd03EfRX0oGZxGawP3oX/.../

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=GVQFLa0j8HYPiz5lrYj-_mLI2q9ImlFIdoKiHQRmoz-x2e_25YNiqI1AVCEph0sbAZ-oSBCN_LKET2ecAfPmDMmEoKaPMB25rxvCutRGkyRvHHgXbott8Eelg6a_vUvLqhX4ZXfskQ-JHU_vpGOoQHobPYFHwulWXZEaa0bierC8TfKGz50j0cMIJBTW6K598ZmZbzJxrwIRIq3nG5BEW_xqWHSP-rg4EXjbF8h0KRDJOB_9o1CNaBCBhJxp-AKii4XTu14YYCAaPrnoM7ua5XF2ca_AbkoCrbxJhL1YMlYJLXKvOGLlw_HuyFgRmFAMjMUMvg

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=34lVeihwcitqqP1vBcJCLJiZ3Qgu-vCdLVx7ysVs15YZwgZkd4tNtaeNuRTbWeeWSOSwzaoLS5aWf-ZpeMJAkJhcPed1q-pLSYdOedzcBmHqndBiRdmHKn0xyj9o4B0MFE3plWaft6kqdls9KtH2tIJPEWHPWa9vmw7UBeIJVzLYHkE-g2RSPXtxo51zWfUunfRd6h8Sxpm2tiIYRKa9h-r-X6Ang2FrQoeWxUY8UeRbhoBIQmHrAGLaYfe8y75ZRXEhrWRZw0axwGSwhTeJA6eCrRmEdAAarnBJfBd8biHOJExG-VSv3l4Xc7yIKkp0btgwkU-mvUQe454ucV7cN2_iEFmtadO0HeNTZrA0X-gNZ3-WnApYJQ

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-135719256

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=bkj5nJh-3oo4p0_RT7yWAiZWOSJdlhyE95Bu1VrJwULQbO1wpYd7U4aUJ4TNnoWgEh_qcuNOxrWDQqlNAZwv1Zly5I7F3h4_KPo38gN_0xdI8AwTtV4HS36AhLsfLbLJNIywHs3ale83cRKfjFW25pGeHCXcxHCXp52i9Snc8KY_Y9lE3xS4HfPwrING0FjmYv304FOopuRQ6Pt8VYFG1mVh1OBQIky6SYSDNHIm6UpxVz3GCBZwSaHQSWsfCreByRQlcW3_BbdXrwJVa4nb6Ot5gAOhuC_rh4HiSSRJkYcK2_yC0dE1wVYGbitxYQWO3_fo9J_8ypNj8vJvMoCEVn0t_YbvO86H8ZKxYzQ92uXzdsJLs2mQOw

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-1973418591

http://files4.mirror9.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=1715689565

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=JwNsZwY5hlx7wv9wEe1Yc_Tw9YrJhSDpopKRrR3Iq4_fBjZzkPisttOkUuH1eHjNcC6Jn18EB9vaOYRT-2GJoosy7GA694GBEy6FilFHZfASUmyVMgp9ym1zVWiMce832FtoJDo9cUDkUjCJV0InY4kjWEYnyH4alHxX9w1L3rAdzKNe84pUZzNLKhu3wCeibDieVV4UsLB04wuF5DVA-BTNJotHTst89YVe-lJa8vfsNljoM9Y9lfl_ZqNr2qwBNFY-gH85Z6Bguagkp7BwIJSmkCD0rzV9wNffCUphcgPf05c-RzrEZTTYPKBwkOsKMTjRWqRzH1gze2E50HpBX60

http://s.m2pub.com/event/click/0/JwNsZwY5hlx7wv9wEe1Yc_Tw9YrJhSDpopKRrR3Iq4_fBjZzkPisttOkUuH1eHjNcC6Jn18EB9vaOYRT-2GJoosy7GA694GBEy6FilFHZfASUmyVMgp9ym1zVWiMce832FtoJDo9cUDkUjCJV0InY4kjWEYnyH4alHxX9w1L3rAdzKNe84pUZzNLKhu3wCeibDieVV4UsLB04wuF5DVA-BTNJotHTst89YVe-lJa8vfsNljoM9Y9lfl_ZqNr2qwBNFY-gH85Z6Bguagkp7BwIJSmkCD0rzV9wNffCUphcgPf05c-RzrEZTTYPKBwkOsKMTjRWqRzH1gze2E50HpBX60/.../

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=SxpZmlj-YF1sVz8Hw6F1P9WDeGv__Zx0e69fU8IvpofTkLewP7xh_EEAM36xmXXv5PdpjpKqOoydGOShvBzZTILO3oJnXyIdXAeF7rNhMReX66SnEAYMLi-eAzGSsTWJbYtZkDI_59KwYz_gsqnouum8hPbih-ubZsPnAMZlEXeEImm4veR6e47kyjSjWUnF7mWTqmyJPnvk1lytJJyStC44vElMRIsaHLsZR41BIpVjrNSf5RmmLq08Fb21EZIuGizgvRZugB7tUcgDVOrTTiPXSZvhdo6UZX-AO67plGQR9-V9KwMoRppXzvzg-Tm8MB0pAq3hGlMncx2rHyUBAP0A7pV3qVcd2xXRtVbex83cXkVSdYzdFQ

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-584966163

http://files5.mirror8.net/dl?bc=919437&aid=176681

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=pgp-HAkyAm6RXe4J9BpPjDfpj92W9lMjLoFDhyEWMCw80w8ylP5ji7_tUul-hLFNsigoqr60NxhSat-DK_acwqHF3liEZIiCY_QkIFv2YhKR2RkxnH7oTKSJntKsJviS225_X8moUwngWpPlavYj-IXA0Tva9dIGXnes_tWzU8-XhuxHY2Wl6AJ4kUGIFBstBYiSdEK1dM3DQEr3eSz984S9NE9Q_igRVQbElHXFcVXYBuLJ01AeKiLrLHhGUzjYQ51zrluLHuVXL71kuAhFPvg0zSXPCx8qItJm-t3aB7BReRG9L-f4rFdVwYpvdGXhVt2N54ADHFLBXAd0VTQ1ZrvIDwi893mIaRj5CrgClLeB2sPlDA

http://s.m2pub.com/event/click/0/pgp-HAkyAm6RXe4J9BpPjDfpj92W9lMjLoFDhyEWMCw80w8ylP5ji7_tUul-hLFNsigoqr60NxhSat-DK_acwqHF3liEZIiCY_QkIFv2YhKR2RkxnH7oTKSJntKsJviS225_X8moUwngWpPlavYj-IXA0Tva9dIGXnes_tWzU8-XhuxHY2Wl6AJ4kUGIFBstBYiSdEK1dM3DQEr3eSz984S9NE9Q_igRVQbElHXFcVXYBuLJ01AeKiLrLHhGUzjYQ51zrluLHuVXL71kuAhFPvg0zSXPCx8qItJm-t3aB7BReRG9L-f4rFdVwYpvdGXhVt2N54ADHFLBXAd0VTQ1ZrvIDwi893mIaRj5CrgClLeB2sPlDA/.../

http://files4.mirror9.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=872197371

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=CMZztfAzfiU6fHP0rFETnCIYmJGTMfL4QqcNWcI0vuYou-1o9BWyADzbq65EJhiVKPCJ_6ABR5SBACPCZGk_GzUYVC3TcuDLQ8vVWrVDqcghFl9BOg-Z3dQV4j8sophNi7RUD1RN3SACWf-ToTBQLSYnyOZGWR8Y47Jh1CNumn4VjJBqxy4G490lKyWFNKFyscjY8ja02ajao2PW5HPkgNLxgPBpEEKkts-qQ2UWdg71NK6R0UlAh6zwCV8HqXoF8Yt2gsYyhjPwDHzzldmrD25RC3eVkd5EqAA8imT_Kh4oicy9-lCGGCR_hsa1x44aoghaIA

http://files4.mirror9.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-1004794903

http://files5.mirror9.net/dl?bc=919437&aid=176681

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=DRnYUtm0pO8hdoK3o0XaRLZRegbFENg-fsHS2MehLzF17kbHE1s27XLmiYDOzKbJc6F1cf06Umnq3nC8xaeGWAG7Z-FDYh2Ul1-Uw1LXrEHhvlrDFOL9w9E9CKsGzfEnuOhFPkACnbQhF6iJnOg9CoNCIP7aPSGOgRoSOfO97X7LJGpttyW4WGOleAa_na7XZs69NPDhG8-piZ2RPbhsZJp40zpeZpWuAg0qGen7uy6IG26Na5-AH0Y7TIFvcJw-8cXHFcRNucElDGeLjpsOnV8OdOu25BTImzQR8R1qQTzfTgq8uJe9lxS0qX1C4J01mmg0nw

Remove uplayermediaplayer-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.