home

uplayermediaplayer-setup.exe

Full Spectrum Interactive

The application uplayermediaplayer-setup.exe by Full Spectrum Interactive has been detected as a potentially unwanted program by 11 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. During install, it bundles potentially unwanted software on a user's computer at the same time without adequate consent. The file has been seen being downloaded from network.adsmarket.com and multiple other hosts.
Publisher:
Full Spectrum Interactive  (signed and verified)

MD5:
e5d2fcdee63cd2663631aef7c98a15fd

SHA-1:
a6292ebb1196e37741aeabcc2e0236f5635a53e6

SHA-256:
4a2fdac85298c74f8e4b0065723e5a9e5467f3853924cf8864ed1a272b6fb159

Scanner detections:
11 / 68

Status:
Potentially unwanted

Explanation:
May bundle additional potentially unwanted software such as adware during setup.

Analysis date:
12/25/2024 1:18:16 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Downware.2220
9.0.1.0183

ESET NOD32
Win32/DownloadAdmin
8.9540

K7 AntiVirus
Unwanted-Program
13.176.11436

Malwarebytes
PUP.Optional.BundleInstaller.A
v2014.07.02.11

McAfee
Artemis!E5D2FCDEE63C
5600.7081

NANO AntiVirus
Trojan.Win32.Downware.crgjbr
0.28.0.58394

Reason Heuristics
PUP.Installer.FullSpectrumInteractive.Y
14.7.2.23

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.14630

Sophos
Download Admin
4.98

Trend Micro House Call
TROJ_GEN.F47V0211
7.2.183

VIPRE Antivirus
DownloadAdmin
27358

File size:
610.8 KB (625,496 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\uplayermediaplayer-setup.exe

Digital Signature
Signed by:
Full Spectrum Interactive

Authority:
VeriSign, Inc.

Valid from:
6/10/2012 8:00:00 PM

Valid to:
6/10/2014 7:59:59 PM

Subject:
CN=Full Spectrum Interactive, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Full Spectrum Interactive, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A1AEF489C94F2C514EA16B9BEBCDEFC

File PE Metadata
Compilation timestamp:
6/22/2012 2:07:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:HZSIPvH69km7lEMMaA4YArTh2KvoIKdg5t6dBHCbnv:HZS6/WcvtArThBrKO/6dBHC7

Entry address:
0x333B

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B0, 73, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, C0, 70, 40, 00, 53, FF, 15, 88, 72, 40, 00, 6A, 08, A3, B8, 3C, 42, 00, E8, 2C, 25, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 3B, 42, 00, 8D, 44, 24, 38, 50, 53, 68, 43, 74, 40, 00, FF, 15, 64, 71, 40, 00, 68, 38, 74, 40, 00, 68, C0, 33, 42, 00, E8, 1D, 24, 00, 00, FF, 15, BC, 70, 40, 00, 50, BF, 00, 90, 42, 00, 57, E8, 0B, 24, 00, 00...
 
[+]

Entropy:
7.9695

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file uplayermediaplayer-setup.exe has been seen being distributed by the following 19 URLs.

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=BXf8O9nEhIJ3cUqCC2wJ_zVbS9xptKodrmWusNI1yMGNpbXiL4U0R9DQLXI4BLq-YcwOdpk1qYm2PxyPKfzgtNs6N4Y2sclCrD2iPq-t6f6-QXRRQiOif_eq8isBfrfPuWXRNnVbmjdfzAlW9azUye7gavC7Yat81O__qMqUWc1c7oZHkz2PauZQ38gIm0L_V40sdOSAAGku_RxXbcdb_Ba93auFFgTVNcLvq2bowb_2OlIrG9x0Ae37ntlyqsyROq0KC6LgcgJJJUSH_Hb6fEoVMGN0GRAAJS1IW14O_yNQq6POGMrTJk1jjGCK3LREZErYuisRRdifMuqoAf5VEZ3WloOoAfeitCXQRj6jgtXhVvjDJl-Wct-QpH-l6LGnl-HxV6l_

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=v4CmeJum1W1gfsftNWFt_N82WQgBi6jQo7im-2WI_Rv0aX2_NKoMJZiv3DfZgbkJ44IvqNGQr2pZoTDZMCsb_gBlD855-fqs6WdQV3av3yLzx65VrcYx7dT-KicyBKfvAuJ7PjzTaSJSv_-780F5oacJXSqI2-HfCoaO7UiqPLmaH_GVX5PKKlp1N6KN-JqQAHMRK5a-hZRDXadbOXnSDcfFbzoHytAN8CFurmzSIKReYkIHcOPRJYxwP2FlRqTl-MKYQviBc5ZQLXYqJ69cTI0hyu4TMxjfsXQWxjHQTMQXDgLpUOH5lz76GR3GB_R9mWH5qu7i7EInKY6AMNOZk15R_1jKpEXM6--1XIrrDXauuyHAu4jGAbzOrGFm

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=CIwqlwF5UtHXuNbRJt2Q-pGG9gjWWyk3RcKPB6DG3E8dXXV0InfksK2ZoKqcbtfz27wdi7i5OlEBd8OABkaHfNJQyIiIJeYTs6KwRUO2Duz_nUlDDRTJ9iqdjrRLmf-n1J1AWxnmPgE2GOQ0MC6_osT19OUZs5zgqWfUKXGdI6hPDDmo9JyKBAieVuY5sCQj_iIpLnbAgjZdGi6dRqe7_6txUv9tCkKpjLdwTcqbX6jdl0n8opQ8tB5bfJmLNM8KU6Q565ghQERgoyQgV-5wzcBCJOhsDZg3YMi-bC06ZC5ViLBMk1YHxfinmJGimrPNh1SYwX8MOs8PdNKBhL7YizBtahbRXQ-dDMo7s8feLoAtfgHUstVqxJ1qtWkHQ9x1taqNO5uWOQQH0A

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=UzNH7DvShx_NAhSBTM_1COv2fuSair4xZie8I5JS9LSDiRh3Zl276un84dTqAOnVAn8fnH2KJpSTj1KFNTRiXzV8cZX516p631L5k52VHqYqc5lBO5LkqfNENINk3W2kfCaH1czrbC9ainavKN5z5SfJa25Rvki5-96PTknw3suwG6JpY8oAX1DohM_EdUrcDynGAKZbnRqEC9Uz6QccxfIUoc1SwKCCY06opW8518YH0HvR13K4Br3iMExaSzCsKwpTns9Ms0BO8oaMSrWCWh1Gd-kHcc9JGdhWK2ylWL9d3ezf9R1IXix-F9LMioXek1hmcqRRmJrfR6NWCj0NRZx4jeCUp0eW7Lww_so92id7ru0Iix55AXj5uOdau-LPGYpY9FrZ

http://m2pub.adk2.net/event/click/0/F0yebfqqe9V35_wyALZSCIs82J2EehwWhvRmNwdGwf5kELsWtLmQocKaclfihvAZi79Yz7NRRZNULrBILuaF-YZrNtJDiZYj6w_lnyVgJQxbii1bk3wIKAqyJqlOaqATrasQGRBhqBy_MpkMtl4RZikXh5Qbm0dC_1M156KuEZIcmY61wRAr_J6oGh0RC7hP9Ldty52qwGs9uORbce4yInIdte2alBG3RPxWK7s_7ZleHjbFRMcL77IfhrBeg75qD3LazlV3OS9CAO1EvO830WJ7EUPM8KGs5QWQ90WWcbkeJfX7_DJx0ZV1fC55peWcI3l0CUqHuIzrChJZAtZpsWD_mrJBugnwxsJfZeMm0Aq5PEkP6I_DmPta_-p0TjjdRxyddnIjOUtSE4X-q7q_rv7Qsu-7KVIr/.../

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=582531&bc=919437&country=US&cb=-42718822

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=1ucy7RC6TGSZ__1o4rZZs8KYXmYUGMxfIjZD1sSGDlVaZVHfm1MBZ_ninD7JI8Qzaf5YYD7Gghy7QQBem_VAUNQ94CMsgWE-X6e71GG_x3boI5tKXOUsrADz7LlFVu79l3pneKhW-0PGLKxzshSi4EhbE5Ro0xc3lpxxIBBVZbMwLaGXaWazL5kpPgPeNBkjwzxmjHTD2menGMA6LuPkqs52x6lbjiPwuTIuXytv08iNi0xh7wqYNpog5p6WKcLb3Sb1YxekVypy6HOjyJiwwx9hcGuk_WWRnXXbXcWzCRyzZmS-VVgIeWI_RuBvAHSuKJX-6bsLkCsOa1xIgEM7jMKFN-yCbVmPvDKAOHp5ZzEgF1XVUHnrc8aB7TnW

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=582531&bc=919437&country=US&cb=658574006

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=Jf_IayMGS_vZaRW2VPdiR1-wxDVxDU5Wp7AIY0OvjXvmcmEvhuRhNMiRX5AgYRU7k__NP41wuqhZIZQQUxHyq2i0UrvHctUeEvGqpTRNDEOepCRL7tysXpjztyhtEJq_uObGMfIicRAuvod_3V1IpSlFbP1KvxrjzLhG0jnF9lLnHUsZgYv-bZvY6lhwhxLFdVsslKt5hMlprFywHbzvxLZ1LcSwEJJYN7S-K2NV0EXMKMhxLOn2Zj_yvVlhCzhAw0xzf0nhFRcfeubDd49KlYo6Fk49sbiOlokH5HnEh6W0hZN_2LLTwpL8iHDs3v5gKbYQefREdX_RBY8srBmOzrDLG4gv1qPk8Hp4_eqaygGe_ABCngPGV8Hmcn9WBn11rzbe6jx7QaLX_tU

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=582531&bc=919437&country=US&cb=-1451190036

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=qM6i2CsH_y-ZO5fjQzIGGmoUh1g27xqVOow6V7czyEjBHmw5kYrcCp1sCNJPV-XePo6RqaCapiBkHw9BarNo7x3eqXEaWD3FMCm5-rlFl4AFfuJWZ2UlnoiSLyNHgnck2Wh1g4Cf_MB5ZhhOHm3S62HxPtbAVp2MA_xz4h51px7WZAwsPRd_tq2t0Z_8560oyzqoM9iS2SxPoFTbvmXpxlkqbYeC7SacuAANI0FyWzm086bErG_iBpsYRp7W-NMXPomZYz-9s4EH0bHUhd3m9nZY4QgiwkiHvgySAQXUCQED243mCxCsU7vUdhJYBvM7QA3TATQmuV2hVdkQ0w66MDXoySjw4UAFyTMOb50t46C-JorfThVgxAZT5sQWmpeNMbtPYtA2kCZ1CbY

http://m2pub.adk2.net/event/click/0/Naar5m3otxaX2iaCUPjqFzR-rpoKOcK2ZONRj08FL8daThsGen_8EDk0RoLf8xOvSIQzeREFKgVzPJbbiJwkIRhYEvt2dPogUwJXJPuY-rhKkXdcuqtJkPV1RzMDNIZTKg30EAwGcxxQp1d8Z7vA8RGHp5vjvSAZr2fTmw-ta6rtCTr_upPFhzNmBb66qfd-FUlWoxbPIxvuD0nIzdOGXtLvm6i3D_y_WjeokBkE1nQ_YlF2jZyT1xTg2mXQbHdlyM9blCDUQeXSkWDOjBsJyFDXNSHDsqp2289097HtqBzZvMWmkvIjBRrYXLNVi5-WosRXTewTdW5rBGfmq-V1fNtS6g641qjLFPYR0EWteOfBufivDDz8R9XkQn0n8GbwId_6MSMirrR33HDclVxNZKOCo7-MMlMjpea9C29xcirmfx0/.../

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=582531&bc=919437&country=US&cb=-153175903

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=XiQ3-JEtR1faJE1uf8_Pwe2N3utK2T32Wdz5G5AEfJfP4u-oVRzfrNlqVzYhzd8l5x5JRMavZU-9awWAig4JbHcf_nQkGTlpT2PJbH8TBzttufUnpXsh2xpFtw0R_909AYKevcZW552dYIs28PLa4Ru4x1RREfLXJ0maXme3GWx329Hop-TcPtG6MKBaYZkM-6kHBc_ZPppD2cG3QHY6suXo-FjBhic2Y3X38O0AybDSrAxS4aOm48ZPRs17uY_H9Lk-V2I2fC1znY9VL1cHFjiYkPgwFaAPSkaBGzANyLJiyqFyYDnWInL6fEXsVGAM5NVwEC83bqJrQBa3eSIZC44U4BQLT4ZQReCVijVGdzWhRSfXCWgope0RcKQRgq8a9PzC

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=582531&bc=919437&country=US&cb=1476730804

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=N3QrPNJq-zM1aCOHthONZVQPb_LH44jGmlvb0zIoRGJx_7kpDepOr3m_nYkmG8C72Ew570yZSLivx0CwPWRwcyHatT8eV_TMAT5nxub6Gg-O7x7NU6iSf1wyRj8Mgenl9U5ErFAkAXEbIFygHnsl5v0Wc3bO-rYPHPvyFEMBWOLf6kqjAWcBgkjbJHlEVZh1zpEBWfvvVe6hf1E0-JOVn0VmuB5jwaqwOxGf2gkQG2e-44eyRTZ37G0SAs0DGGXyhPI_OPqopuJAYndKwYZ7FXCIrF0x8PkJnKYoudT5ORjjFTx7XQRAmwAdqCEFUkeXBXxVMnzH6ysUHGVAFmwMUv5a8kyJIMYogVQMCnqWDKMZ9mrUXAQgNwZLQOI99yL6YFNr2w

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=582531&bc=919437&country=US&cb=-1594598988

http://files5.mirror8.net/dl?bc=919437&aid=582531

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=WciWWc1pfd_k4pcIiJedmzygEGB-rNDoE_CzZmyQm5bfZ7Om-BeH5ACrQ65TGtzwhmyl7mSEyw8VNgCG1R2H66n_Fj1npN5yPR83gGfcri7WprTjV6OQ3j2M3xUGJrBbLvtS4bTdTYxYVBJKYkV0_gE0czVrSfeCTM--eACXoplmp1REDMUhftaaW2_OrRXGLAdzNrGg6SdsWAjavim_cO7oo-ZJpWXfJTNi_DiSB0qcWAKCpX4VvgVi5lYAA-CIAD9QNuCkTixeEOqWfyInBSsHGAehSPQNCOkLAT-QaLzsrP-wKbqVaSs5_piAKPX8y47uCfXphtfUWRJ1wGaKKTPAfwvg-MygJKkgaH9BkL9ZTPjPmXH5sgUiFXY7tulvO8LAK2VQYR75QS17vG9TE5ibcdIEjpwlsAM

Remove uplayermediaplayer-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.