home

uplayermediaplayer-setup.exe

Full Spectrum Interactive

The application uplayermediaplayer-setup.exe by Full Spectrum Interactive has been detected as a potentially unwanted program by 9 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from network.adsmarket.com and multiple other hosts.
Publisher:
Full Spectrum Interactive  (signed and verified)

MD5:
5a613455df5cf6f774045fea60d517d2

SHA-1:
80e12ae0fd5eea9f5af6a5b522e7d5b4653e4320

SHA-256:
c80dc0ab728525277e3d9e0a6e50699b32fdfd4553bb4eab7d8647e338634c4a

Scanner detections:
9 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 1:39:44 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/DownloadAdmin.AH.28
7.11.115.108

Dr.Web
Adware.DownloadAdmin.1
9.0.1.0129

ESET NOD32
Win32/DownloadAdmin
8.9089

Malwarebytes
PUP.Optional.FullSpectrumAdmin
v2014.05.09.09

McAfee
Artemis!5A613455DF5C
5600.7135

Reason Heuristics
PUP.Installer.FullSpectrumInteractive.DD
14.5.9.21

Sophos
Download Admin
4.95

Trend Micro House Call
TROJ_GEN.F47V1124
7.2.129

VIPRE Antivirus
DownloadAdmin
23698

File size:
575.7 KB (589,528 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\uplayermediaplayer-setup.exe

Digital Signature
Signed by:
Full Spectrum Interactive

Authority:
VeriSign, Inc.

Valid from:
6/10/2012 8:00:00 PM

Valid to:
6/10/2014 7:59:59 PM

Subject:
CN=Full Spectrum Interactive, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Full Spectrum Interactive, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A1AEF489C94F2C514EA16B9BEBCDEFC

File PE Metadata
Compilation timestamp:
6/22/2012 2:07:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:SYQxt2ctKQEGvjITZD+jcEckHnyudpc5y/zDnYDBrfw8AJ:SlxIQEMIT5dAzc5y/zUDBra

Entry address:
0x333B

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B0, 73, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, C0, 70, 40, 00, 53, FF, 15, 88, 72, 40, 00, 6A, 08, A3, B8, 3C, 42, 00, E8, 2C, 25, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 3B, 42, 00, 8D, 44, 24, 38, 50, 53, 68, 43, 74, 40, 00, FF, 15, 64, 71, 40, 00, 68, 38, 74, 40, 00, 68, C0, 33, 42, 00, E8, 1D, 24, 00, 00, FF, 15, BC, 70, 40, 00, 50, BF, 00, 90, 42, 00, 57, E8, 0B, 24, 00, 00...
 
[+]

Entropy:
7.9663

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file uplayermediaplayer-setup.exe has been seen being distributed by the following 24 URLs.

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=2pQwYw32G7r4F4DzBn0d9vQ9G1x-y57O2gToiK2VkWNtASwE_P_BD8Ycu6l4vA0WIvDrp2jMw14R_1H6qIfA-f4uE9bDgm2SJAPdv0zOv_f2e5l_Kvb75w6AnDmvliz9LtX5KXqFyStZknbmhpPrx5CkF5Ji-W1VdSc9K0Vk3vmo9kiEms4Xw8fRNpYhsrGxMlol5PQRuH3YC0VCOwYGafzANpIteo-Yh8qeMn2b6uRAqcavI9uOlw2OeHfabW-5u_MJ6S9BjwCwBvUuGX377nqCQnKvTb7EHs5ZvyUloMO4q10ZeZJOwC3dNFqe2IbFXP-J0KwxM5TY0stOXRcLlyrl4_Q9zATw2f86Bhlk9ZF66b4mSHH7hcwT2MT-VxP0duWI0dvW

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=jLb6hxUv_7EqylYmm34L8ucrMc5nmHDC1Q04DqlOJ8mwR4XM26Wtnhzm8LdYOOesEm7gWhUsI0TFw9qqlkbUqFUFpNs0YItQlq2p6HYL5TVzN35njYyp7DszizNAIwc3uaucQyuO7vUayK2rLUaA2GcmucSpkNVlAWAfVAxgFXTUAP3EMzw7xHXyNKv_OejatcIIkZo9WtVwmGnATuI5pVGBJjhsXT3qU8A0usAc5wbi3Fkee_8YWPYOaJq0QI8jEbtUVgBEbwWM2eIFtK25AR7frk3bJQ4ZA0NO2mzZVrvBtB5ukUuj8LaaFGopqGoAlwa1lJ37BUuvyp-xIiHHkyXKML1BNLkrDrQEiA_lXk7DeeLznyV-0FscVJxtziq9zju38ynM

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=9EV81-D7GUrV7tIsx0j3FPI56oc5sFsxZ0aDlmmsERa9aAkeV9m8wSxj6CytXYY8RHJdYTpFivhYdL4pkLpIuHh-MOZ6Il-vUJ5NMlCloroz-H5g0WSrn3U5kcAlyAxb-IqVpb7ZsB0y7J2r8xIhONDD_xvLqNpmNbWaw0n8kUGc_QXw97DKXaK5uJ0uxqZTMM7o0rKSp38XOIs1TJqoCkFH2Frbeerx2DO5X1osACq6CW9jmJsf-EcsCebfrPYA-vHqVf8vqJUKlfD4i94povuZ6OP3aC5D6wMf6QeYzmjEQ-vG1l9lG3WjrzoufQSr903QX2YBqX0f66yinqwPsB2xav9C7RNiw6RWUhklE6YtzOiFfk3AJNEdtoxJJJNKkXj7Gpcnosyw

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=nYEXr7QXQeJVZpaSId2TAkKlQs99muFiSZN8AD-PkUDGSn80FYni7B1QVBPEKpM4DvuCyCXK5JpjbXGIkunM_gDke_uOh29vmBO7uG_BBXcwDP3knoJSVdknGgjP96fAEMyptsbXrx_2zWfSPD9Qe1vMYDt7zPoKZPnejPrEty5HIesFzGezBhlrzdV9dN80EiS7o7kvCOhOoYaBn1MTYwFVS6eMWnSl_sMM74Nq3hs3fyBClLUv679YBjvaWgAlrTSfFJAikyYPgiQwWdoEOUrjtldcPY3nBZKijrAXH1hiYWx7yL2xowgiPdC0CBR-ve-JelL3wxbirPf9iPaEYqEXV5EtIH2x8smTikjJJSqJM9z1CWnmB8UdKB8c03AQZg9IKJ2Y3Si20qc

http://s.m2pub.com/event/click/0/4UCfYOLDtJz1IAKvzHms8RYP6diaHDL40QIDQLMcRcZfK097PLysBG_0xtyzsvXomGjaBpi_I-GpHITtb0H2o8quZ5nHD6FDq73Dnb72XLhwYedC47o4fp69YID8HhJCbDDZlDVUbefh40Mol_i2M6KsTySvnL4n6IvHCG_2uKuJMr8wshs1hHxOgGST3zqH4bjWNPB8C72T2ajRjfCgd7ZyyxdtRHoxoLP65lEyqzU8nQYLkAqmXAZvLkrADVXDNOsDFQNjq-aOluvLPyJqBOiZGXvYYkAGF9YjNLXfxllETfLUeSrbQpgJ4XMhTjxAkS7zYVtEO5LEKVsj-2xC1S3UvKTMPUc9IDQkceSecHVyHgOnDQ/.../

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=6xcC60CndDBdlmtoIhEJ963J0k-ssfahbyDODCvx_ePWIbBGLOlLNCLw4SpLv5G53N9TrWwj3N8b2D1VGGbNQSGJtcf-zx2wgLKTYE6JOMGlIgZwSWcfLp5hjFfS250IEGZVzpfNX6Ggz1IAGlX2cITt20VGmS-CRFBFobjU7iwBi62YS1gBZ5GV-6l_0uNRBrphZvYmiLkj45Gb-EfHtoFZ07OfXeCHhn-EJLZ2hXfFrezLddzZTY_K3kvXaXqsb2TMonv7pLLoB--cCjOjCd4Y4K6M-j-OSJbJSuL0pvjCqyFEPzVknQGU9qLwXsZjHcUZotwnPt10zAXZGHNwScbxkr3_xezVrq98dfqnfGQGLVObEtMtu1_k9Mr1ZoISkHV9G8hUBqz5EMadsLCLRiyt15dDSACdbB5ZOlHsl6E

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=dGwuPFKjPBS30XdPE0QEvLKxSXNrV_GjWQFQrS1ihYkKw4MnZmQdoK1_33IPa0jfCugET9hOduC0HMHVk6opOLZZq0M53J5xLDSZvM7uP-qtjcfhLIlNuDy-9ED7_-aS0Kk4cg26aeschW6nNtNDRJIGdOsiYScYJrsp77w1lcwJKw-CxG2Tid-3ET2y6WwGkKHJIryvtKM_gAvINaI4g8SPYScKImpIAJDZrpog_q9HnyrdHdMWu8m1tq7xV505V6_7vcwJvB_B2XqwGYaFS0SzfbVEf9KbT63cEctJaSQLf7j5cNlollNXsB1JMJ7aHISI3iFoVzyHYenZWzpomEzl5mKdOM9B340xGy1sPLLBqZZU-Ru6b4mOpBQUcub-Xi4VRkeaS29H

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=CSuKaOWM1aMGn0eMHgAWFGiJVVptlKOL3wbNKYl7Ux-zdRTXJPy3C0431WqAgbg0QzzU7RQRklCvL4BVuIUHeZHCbF5x0sRJZUaZWIZc--AnTvct00p4YzudgH3CwCsOuYmFmqGmm-KuK8D6BCBJBSZU-r8jK-Q4KvpuGEzhOLWcqR4jcauCL7c3NFJr7HMItx31BUBqHq5k2HmWodBqeb-nN5QrG7hGRJ-pJY8eO5HL5XMPci1vYIFEtsrAFrXDMML4GAo_SIFk5JRWgDcxzdFXuQZ4ubazXeim-hBgVY6ypQD-PyrG5jpk6vYFPXb2wVs7NMIIdjHNDj1yPuhsp7CeztIQKWnpaDXygljMbr0PafNMmTwfb_Ivnga4

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=UMoFKYQUYk2tzpK9NozwLIY3rgHvB9CYFt7SHUVabiXa6j5SiesvpLQWdsSoOIBVcvtxuCZgd3h4TwrGa_-sAIC5q6yUME_IzvclAyd75N2IDWO8-_AUAiZlOi3GQttftiuAwWIn1yzdfke4O3CmjQEf7iXEyxYVOuo9CoHl2q2iQWwLSF1km2LfMOxA78Fk_pfgWMvtKXI31ZkJvwNBheszPxbTA3uG7CNc9o1ctnU1pRd3z1JjgHY48ybv7ptliILg8Q_LZO3ILylsZMNIUrEHZ9LppJX3MINc1rrpz_HBdAYUnFBzcSSLPI9cSAPMtfMZBd3InxakLRnJN-AqKhAIdlSpR-GL_2S26OJ84oY5NXMSfkaHVjozt2R5Ly4n9OOFzXEdlUhx

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-527199312

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=AFHdZAPSMEId0cw3rnyqaVbXyZdgc9yHEbrgCsmXJd2h2hoB5XHnzUkk6hYS7GaZmf6_PG8PQEX-At_e6eFJMXxNUFNgn42dVvAD4ID-U8WKUSGwnv6WbBWuWpP8Bc2wRJFbSXyUSA5LLuBWrTELW-7j9_4WS25Jw0yV_5LngMViXGT7s_WY_gpv1y_Z38swsLthjAspuxUcS2Bmt_wzIXpDW3DqZqe8DlXL1dPOJg8bcoqzVdV4z8iayYpk3A55mpdGJ0MqN2X-sXetGhuB02rf5Y6JrubzIpBHd5IvUP-RNqMyvz7Lb-bdwxF508RJzyuV4ggoKd8re178Z_SFq81cYgr3qMxAMSMf4Cuq_YJ7S5aLh-lC2KChJBRA5xstt2Bp_f5Dkr9PofmVYiwKrMDyhdAFAuEEnMPlsbtegw

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-428079635

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=6Zzgzwc-yCPw24eeRHgb1LO1aN9-eEpg_A4LHyPvpNOGcqOXCl4CWahuoyqLgXvwaGvdR2DyeiPq1uP_zv7EdW7ZZ1vznA-lcQ3A5i4Rqm3N6a5b6BZghNcYmkOCrNjoVhaK5hRjIptG_YBKouk6XGUYo3KZ2dF_tmREvDGf2aMbAX3uGOdQg0PX4ZTIE4DBcNTcujKelIW6Ip_FONLRuQAo-lWSpBY_xT_HX7KVQLrEYNYJwB-nLUcU3VbKN9qrqcZ8sq0NCbUgM7_dxP8g89jCBSrFsQgpVVod_uvtw4VQS56eLDi5gl5MYSGPJpaUn7fMi0v56eR0kP9CxoY0Hwpe_B2A0B90T3-DCmS4N7qYMih3GUv-gzNE-knf

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-1846989889

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=ZXoghLiF4gikmvhgFXDHjNNB_tqpQPeSrW9J8EkL8tmfwT3IF49U3Pjeu-eQknw0KoQH0c5OEuIUFcbH_TmPKzgXTwJCDl_cmDOF_7kECYcAxSZ-PTmj0qT3lbQLkccjlxXXbupFPCuo88b4MpNWLsJbQkW90UQh6eZW5PsnS5ThOfEGTO6nlHRx8Hs4Nc_z-Y0YlOTp1RvE3iDxRNbQTmiuVKYtAye-ykkF-d7fSnRjJ8HisSgbYNPfEIGA0S_fM1SuvrA_XgeslizxRkmqVFidPCiEdTX5G7NSOm0pzXflsgKeOYq2GWqNImyMUxR70qlnc_NlyADOxeaSnck655bNvXsNsNj63b0QvT2dchDNQcfURNCLHD32nplXm31dB-zX

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-1217848040

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=CYyFfiLrUxOiyu6tUUU_fmUkdZo_3G_QenZfghYFMPdxvjfnbFJ1AA54JdbCPC6IYi9Nz5yahHFuJTyGzWvVdEl-I2JHg80NZlBPbDDzA3QRCTFR0QVwQAjQNeumk6Y3Mpbkm5b1-pZt8LsyAlcFyWNAeVtgeghggZ2dFM7l5Ytc1ln4Zxqe48f7vP0yQewrLXGMX2MxrfRQUSb6CyTU7I2g0EhqyYVAmCE12yaQxMhOgspMKbVTrsOPLG5vsVg8_kFAiZpBNIOyUUeBtoNHy3fQOOSac1V4Pmd0qHUVTe754jBGYdxXPd3KNaAdI3EXKE2YORnvo6DcVUT71OpOWP6sIPOTDGGBeA3Kc7eM4wAQfbUMFEddUCaYt_y2feqS_0vSzbfX

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-984567543

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=7bJFKjfv3_mq4ETcZ-2AZ9IaT-_BhmNWJyLAwBXNBtWC7UBgGiMU2vByxMIdeLmeUOK2v9kkoQQvI0lNazUJ52xKIzZ11aGK8yEVKGNUigwbcvBPSdqCwDAybAzCOsRAU7B2Ft94D8T_h1WH-Ud-MPypTQeaPQQQVQHEUyRZHSouPSyeouaIPQXIDrqzRLgiT4QwKoFjCJnHFY7iQy0APzvAF6OBGL0Y-Yu7RU3OTw1iLxIMLRVFdJLHEMiNYQYoHkpABpi4PLnMCEW1X_WJcWAhrV6JUIK3QqEW6FwCJETobAgQcV8gTYe_ZTy3JGzeBS1LgmWm0eFPARGLal0Uq_Vp46xSe3IawpqNGciAteONQpaIk4vtKbShZdP13mT6RQo_2xywXYVQ

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=706800199

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=UeAbNvSN2SLoD_Q5ezSiRAjZMei51lg1QMXPxQLnsPx_0Aw71E1q0V4lnnSFNeZTKZDdYwbAG1rVmdMofebkgaGnRKPhIh-fsqKWuGSM2RKmGVGN58sAK4w-ydmnJ3u9WyzCD6UCD-uNk7K_SEx8r4oZovK76ge-UbqwSRKQ4bQA-j0hEoi9_CBZTYK01N9GLwW3AOaop-8ZvTHkk9od51-Z3u9iR8J1uhIMHUyehFoEF4DXeJKEgB6Dg5UXkUHc1_bgwGCRrgY0VMTQbTbY6d5WFWU4QGtiz3XK8LtEKWyFE78YqQ9mjgJc2_cmXtfS4rklIhPZ8jfKTRsfv2iPUvcU3HIfE-x1N3Cm90CVGz2FGtv31lsvoTVwZPENuby6N4CtBEfGTEyTjYc

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-1680909730

http://files5.mirror8.net/dl?bc=919437&aid=176681

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=FlHsedXSk0fqlytulbEQRr10qnPtDdelg6AAWoieW0pv1ZbQ5rLR8fuLBrV0OvJvUIZmQvK1SZUxK518KrGg9P74KwpgruOG1M2qbBsysiQpPIjPsm5nf5K6eexQBQjAmvDXBtQLWHW5AN8UKE-nuOBS85EXQjnDycRuTnL_UQMgdCJg9-tDKo_6N0kXwK5Nnc0yCBCTYhYrIYw23R_M25FmrAblvb9vXODVveICOQ58kfgUvxIl4wrwDLoVtrxH3e5VwrnNLMPWK6_YcB_hkQ130n9D70IatnESQmblLowzHVbfjBMzou3xDe7tkaPJHeFV2aMz6wl8Mn_RepAGvinO7NEREthnQwoTgkmk2RwpabtgK6p5zI4HnejVjnHbso8bA02S6riQNA

Remove uplayermediaplayer-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.