uplayermediaplayer-setup.exe

Full Spectrum Interactive

The application uplayermediaplayer-setup.exe by Full Spectrum Interactive has been detected as a potentially unwanted program by 5 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from s.m2pub.com and multiple other hosts.
Publisher:
Full Spectrum Interactive  (signed and verified)

MD5:
f5d6fe9059a53cb7554d16eb6969cab9

SHA-1:
83264a294df0909525319871fbd412489e6eddec

SHA-256:
8c90d96f11d716851e7ec4cadf7f52ec02a9b1f060133814fc428dda104b105e

Scanner detections:
5 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 1:22:54 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/DownloadAdmin
8.8987

McAfee
Artemis!F5D6FE9059A5
5600.7081

Reason Heuristics
PUP.Installer.FullSpectrumInteractive.Y
14.7.3.1

Trend Micro House Call
TROJ_GEN.F47V1013
7.2.184

VIPRE Antivirus
DownloadAdmin
22872

File size:
576.7 KB (590,496 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\uplayermediaplayer-setup.exe

Digital Signature
Authority:
VeriSign, Inc.

Valid from:
6/10/2012 8:00:00 PM

Valid to:
6/10/2014 7:59:59 PM

Subject:
CN=Full Spectrum Interactive, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Full Spectrum Interactive, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A1AEF489C94F2C514EA16B9BEBCDEFC

File PE Metadata
Compilation timestamp:
6/22/2012 2:07:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:TYQxt2ctKQEGvjITZD+jcEckHnyudpc5y/zDnYDBrfw8A9:TlxIQEMIT5dAzc5y/zUDBru

Entry address:
0x333B

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B0, 73, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, C0, 70, 40, 00, 53, FF, 15, 88, 72, 40, 00, 6A, 08, A3, B8, 3C, 42, 00, E8, 2C, 25, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 3B, 42, 00, 8D, 44, 24, 38, 50, 53, 68, 43, 74, 40, 00, FF, 15, 64, 71, 40, 00, 68, 38, 74, 40, 00, 68, C0, 33, 42, 00, E8, 1D, 24, 00, 00, FF, 15, BC, 70, 40, 00, 50, BF, 00, 90, 42, 00, 57, E8, 0B, 24, 00, 00...
 
[+]

Entropy:
7.9663

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file uplayermediaplayer-setup.exe has been seen being distributed by the following 26 URLs.

http://s.m2pub.com/event/click/0/8ZpWI3h0Dsz2iTlUpHjXXdZ-8J-tc_clgtcuCyJ07F7lDKbbd9hkWgJOef9-yFsM8rqe5_xuC3YGoJQ5NbeiwfULEeynlVWuVv6pmmpm9zrXfrWMAC_iAPlBfV5tS8iuzqjnjI5ZeM-EwlZkJJK__FrKlF8aC06qYxcTPxe8QLW4GY1RUZYDTGp1wo-rE30gUDCAhGjnEUypDbl2G_x92DGEtVXlIPkuUo4kJfoWlRUbeecNifo_xpC1IsYGSH8IQ4WdBt3l5PYSxPyah4MhPONlsoXV_AZpbaK14fAfAaAqDtLhd4CMf-_2tOBXlm9AYquPY5WE3fD3N0ltZ2-vWBXiOloyYOA1uJK6i3uBTbwORc63ZyY/.../

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=Hw0U8vvs1trSEBy13TJKqYPeILLCC90lRoc0AA_KJqZOithnpZbHxyyNSm6UVdXVlFqshpU7gZAhq85xp8lMBcJTwOZp4FhOBrqj_zg8pP4mt4KYmd-SfhCm-Vy2pfjFIyca7xKHoVbxZ6Bmt0gMfeBQjGvoqJnO3o30dO7yxazlYvRYxacFtxAuhQNwgKRu1P-wrOqs_BsYE_x_EazV94nN4qk8hJqPMO9LGEPail_qlxHLm8aSM9e7NMdkOP9T_vgy1CjJWmPfur74b_y6_UPsLWhpzGnxOIsgV5qJPTQvJ9rDsuxqJx8IybU7ozDI6MiMhK-TSUoGAmLu8sJY4WqtnI0Y1evM6aGy4y31grDKM0DLxXkX4uS3CAzM5nEtZVun-Q

http://s.m2pub.com/event/click/0/QXTHY0YEpQSGWGgY7mHI-BN2XliAo2LnoNNHBB7G-E9xyXIUz0wYfZTF8niguQlBNURnLYmTQb6Z4W48K5sujtkhIfQS6f0zqBWx3fUd0p0z5lRhEwWZVlbLOPtRlsUm-cYr8Bcgx_n1lWeJSKgECX_WUoQ1gpyi9heEDmqvtWqW0FLhNor74ohQYyOsVP3FLcyJjznjBiKaKTs9hDzyEv8pViHmNiPYDYaRseVzpXyost3wz5tIeBVfuPNjkWZMz_yDhT9RVbTNfWQ3WhTHCKZW2QjZXE7Dkd1AtdWqgz2d_G1bnZvwkh_vV4MCr7CrYaSYmJ2BLjQVKCq99Ctu3FZyjhl-yUzhA_A9gLYECldU8KAn1JrladLTB0KS30mvd-qaLTKE2ZobxoLj/.../

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=B-rTZA5_d_-mbbuKMDSWXyjhJDBwjFh34nTPZTh-JXv7pNonQ3z-mEO_wyGkuJF5kkVdAZyGKIImFY_GkVR9lNI6epTmP04YYmjQ9GlCADXL4g63An5TnnqO2lv4HmylsLIHwbVtzs-ffT90MJ-q7p8M37W2gTn9vm4uVXasZ8Ckaajhxv0JpUQXNJfzjvyXKcYcIHK-fWBgFpsmIH4ZJj1AAHb0AfxqidNvyijIi3-Ae8QBUxDhVAtyuKTxZ1NAm8oaWja0yjql9T4FmKnFnK9CRJAV2_W6QoOdL9yRCj5oODyBUMIbvLD66vyhLMQJze3dT_X_AUgi-w3uW2_HNj6BXg57hzFkFtxlI5M87GtDBgy4ii6SbnBCkZWF6hlLsl1Ppi1T67GP-70

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=ywL1Kbxp3yDzcfHgd22GcQCnQcJvN_VioE_KpMORBwzbkDIMQErKuixE4Yna0KjAVOOpIdUnH8FSqmP2MVomyxVR3RdhqcR40VaQ00XB-p3aW1qrhK7RDZFQ1xMXowirje7TKng2uNg7LANKsU_3yrLy0etwk6EOvJyOUhEpbRk0-qUSGSQ8Q2EEeBt8TtMZH8NZqqV3zalbpT68CaAAuRBLOdG2SplT_x8lkg_y5XrPpp0mql0LvWcnrtnMu0UIx0Y-1pznLIORh_i2rRtzrRYgU3kS0ABfj8egg4y6Km0cEWBXSZaD3fLDKOmlnKDaJ5fTabrmMDgQT8RLm-Rjv46vqzL4HO4oTWQEv65O22GiKf5JGrdd2xNstRCCVj41p1_t6QipNmyE

Remove uplayermediaplayer-setup.exe - Powered by Reason Core Security