home

uplayermediaplayer-setup.exe

Full Spectrum Interactive

The application uplayermediaplayer-setup.exe by Full Spectrum Interactive has been detected as a potentially unwanted program by 12 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from ads.adk2.com and multiple other hosts.
Publisher:
Full Spectrum Interactive  (signed and verified)

MD5:
a4ccafb7c81eca4386f7130b1f4345f6

SHA-1:
cad23e3ccdc4f64ea96a41bfd1ca0d9426da9e7e

SHA-256:
94551b7023c1bdd5be2020cb00c15953a70df04571a2d7f48a0d3c743a99fa59

Scanner detections:
12 / 68

Status:
Potentially unwanted

Analysis date:
12/25/2024 1:06:46 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/DownloadAdmin.AD.16
7.11.118.68

Baidu Antivirus
Trojan.Win32.DownloadAdmin
4.0.3.1459

Dr.Web
Adware.DownloadAdmin.1
9.0.1.0129

ESET NOD32
Win32/DownloadAdmin
8.9140

K7 AntiVirus
Trojan
13.174.10439

Malwarebytes
PUP.Optional.FullSpectrumAdmin
v2014.05.09.09

McAfee
Artemis!A4CCAFB7C81E
5600.7135

Reason Heuristics
PUP.Installer.FullSpectrumInteractive.Y
14.5.9.21

Rising Antivirus
PE:Malware.XPACK/RDM!5.1
23.00.65.14507

Sophos
Download Admin
4.95

Trend Micro House Call
TROJ_GEN.F47V1110
7.2.129

VIPRE Antivirus
DownloadAdmin
24072

File size:
575.8 KB (589,624 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\uplayermediaplayer-setup.exe

Digital Signature
Signed by:
Full Spectrum Interactive

Authority:
VeriSign, Inc.

Valid from:
6/10/2012 8:00:00 PM

Valid to:
6/10/2014 7:59:59 PM

Subject:
CN=Full Spectrum Interactive, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Full Spectrum Interactive, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A1AEF489C94F2C514EA16B9BEBCDEFC

File PE Metadata
Compilation timestamp:
6/22/2012 2:07:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:yYQxt2ctKQEGvjITZD+jcEckHnyudpc5y/zDnYDBrfw8A3:ylxIQEMIT5dAzc5y/zUDBrE

Entry address:
0x333B

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B0, 73, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, C0, 70, 40, 00, 53, FF, 15, 88, 72, 40, 00, 6A, 08, A3, B8, 3C, 42, 00, E8, 2C, 25, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 3B, 42, 00, 8D, 44, 24, 38, 50, 53, 68, 43, 74, 40, 00, FF, 15, 64, 71, 40, 00, 68, 38, 74, 40, 00, 68, C0, 33, 42, 00, E8, 1D, 24, 00, 00, FF, 15, BC, 70, 40, 00, 50, BF, 00, 90, 42, 00, 57, E8, 0B, 24, 00, 00...
 
[+]

Entropy:
7.9663

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file uplayermediaplayer-setup.exe has been seen being distributed by the following 19 URLs.

http://ads.adk2.com/event/click/0/Rhlc5C3Z0yTDhuvJfmNnlC0a9Md_CnkegZR0Dl9AnEnGOhdnbdqANwRhyaj5r_GzvsAZRQ_GIe2EoGVYY8mQfb6gvNesqhLQ1Iz98GH31s1WBoqWaNiKAXmjXReFqR93NzsS4z4SaGOF1VbAuXQ5wqo85li9vCvRlt1cBygD0uG0glQEMTrP6q0tuyfy_bZ3gVIimcMewNizP-sF0cJQCg8TyOH3S0bkRJ0Gi2wO4qMKbEVdpV6mSy2fq2TuxrgJlT1MIm-UFLcn4jxxrzMfjVUC12cHuoPE_y8t6Bt8Wr9UaBfLUoWWKq8YOQ6cJBOEAzSPkCn1Nod0KJewftukfc4Vl6BCiW1g4u1DVYdKmCzAAA7T8XV04Ddnr9sDPNgB9HvsQe_IAQ/.../

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-894548620

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=fy7jzSfbToBl1IbQsh_ZxdHax-oRCRL72Y0Ofad03eiMfCtJ3Zwd1HYS23cx0SpslynPDwxeOJC91lAFpxe80jaPuzhrVDK24Q_bE3fnXChxA0VxelKPdu2DTgbwmzJrX6OmNDbDEkmbQxix_fXGECK-UmIVs6Ams3By1Ah4b3PX3S9yzWKk565VQoyScfbVPv8s29EOPpFBOq6zca4Kc7vBgZnxxAu-0y4Iw_ITo5HpPJgxtC-XBSM2TuoII8EfJPkIv-ibnsr-E93Op2esArd3T3BZZmY32_02AVVRwNVR_3a0IvF5FZPIDUtCR3QsZWFrF7cAOxhGaYRrzTO4w--sdps1MvFtd94U_5thJetuwUdioisZoAKxu4GfxWQ0f4AH

http://ads.adk2.com/event/click/0/fy7jzSfbToBl1IbQsh_ZxdHax-oRCRL72Y0Ofad03eiMfCtJ3Zwd1HYS23cx0SpslynPDwxeOJC91lAFpxe80jaPuzhrVDK24Q_bE3fnXChxA0VxelKPdu2DTgbwmzJrX6OmNDbDEkmbQxix_fXGECK-UmIVs6Ams3By1Ah4b3PX3S9yzWKk565VQoyScfbVPv8s29EOPpFBOq6zca4Kc7vBgZnxxAu-0y4Iw_ITo5HpPJgxtC-XBSM2TuoII8EfJPkIv-ibnsr-E93Op2esArd3T3BZZmY32_02AVVRwNVR_3a0IvF5FZPIDUtCR3QsZWFrF7cAOxhGaYRrzTO4w--sdps1MvFtd94U_5thJetuwUdioisZoAKxu4GfxWQ0f4AH/.../

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=1640406995

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=gVF4uGLrQsf3Y8jAdaT7sIaNrgyqOXyPeGDVVfXygJ32txBIwEnVnrnX3TVcCW-vdnUF-zc0sBkg3z9t_naPReNcZ2HHylP51fjau2Z08Zc-mpw9leK6Lvyz1-OtG1aTYrSyDHHQaSMD9PCN4p7itRr75qlOzwbue93d9c-DDAyU2CZFGtyu7FF8Z-xrOdNDQPIagoKjwV_BEYvfp08VkI1hJFbE8yKXCtRVltJ66onSKlDky-RjPHEK-WUKZ2PlgGyNeDtWYV2YB4u8zZ3pDUOmN1qCUNMdmk6mjob9XxbtlbPt7oN9HiG0mStdiKl-XeAxb5VZfrjxvjtCQr891zcv5T_x6HLMeJk0Rg8F6I19cSNqKbp4FIY4kT0f0dZOQMV0LVCrZkE

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=893881944

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=e3VycC4C5qUn1zbnuW-0-lcVDbnr__VCXVLBhj3eEKbRnhDfEumlngmpilm8yZzxNPUtLIOOEL0NsrDq993p7RracnkOeZ5aR2gbNa7Tb21nzycVZiPdEIOW5mS18Jk8GJbykqdfTe2gE2hQf3ZBemi-ScuOrOL1SOPOOO0lWbO7J5354qT7EXjNvcrDef3VN41EorHC5cKJ3UyGYE3Y_S_W6WlTWsAx2AuRKeGRr_OKl3r0rPCSM73rocP27jVQpqODfR1igCXpYMm2DsSQmqfLxBK0kon1I-4BO7GzbbpZt_qUfUHC0O_Z648_wxMpm0OJ98aCJs1FUE1bujM9hUCyKxjMZkq1WmigSwrJrgKjDSLpbuUMvrn77LHAaQMIXCfIVEbZBYo

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=1948878534

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=gyOni43MPSLHsaDRifuHJ_moHdtVGSpF3qhNjB5wg3cVAn3UuZSpWecnK3QMPr7sC3lA2ZlO5J0z-vHSpbZXHNQSd14fk5_nF7b_aJntGNdwCOBWUeVnBYDTSc_wITjQULc8vHjsXPb3BkFoCPmPa4s1DnFn88DVnKJde7mFWZi3DaeN1bE90P0sMjp5JnjtVn59wodfapx9cAaK-oFlpgNdUZhs-JS5pnr2Pxl8xpWRyX3dk4RZqLWpXfBdKph_LtF_iJWTlL0IjCRz14cQP_j799-zFhrkBniicpMmoLZ49S2XRMRUpNfC1gIL2rWJ2IBdZCOZymFXVSzGfj8Ua6GnFCY8mDfZdBJ7C5d349Ty8Yzja_psNWgWrhv7MgnAEdfG65IU7qk

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-798283667

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=iE8P1K2BwBTB83sVqD3sCCfroly211g-M59f3Ynifsv46vZbIoKxpp8XnDqJPj2IzlWbsiwjrM6ZhJCMq9pmXTEtifAQDAT7fnOsbz2OkB6ZESbRN7d1ms0J4YIaRmlNWn-MHxiOE67m3_5KeF3kfWKarTsdxxyjyDjjttWx7gBhTa9UAt-ImJ5wZOSV28fJJbbfOMgc35nm6D05dJ5RFtEUiteHZOJWChWcFHF37Dl6yWFkxnmZDquXljLUEWorVJOFPiePuxDFnBLV2j_0LqJXTBcxS5nSGG6vyHdN4BquPp0jLaLyIBc_KdHxv4xYAAUP6Ozgyi9FOMYMF5l8JU8n4UIMZLYpTeSPvmwy0gssLU67tC9T4iy3WBFOuXB8HgSoe2vsJnw

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=-1890313158

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=ZbGERRWg49pg72blPs8dTze8Lr03geWbybn3B6GUaJOfgFjcuLU0M3kEmOnFLvqDn9YcGAazbleQ8tyjtUJYhaAsh93qBi6O76a7uXaDMxzY70PcPjN_Pj22ywqF83fQcy2xR8hGAtLicwS7cTsuELRJKeJvP9wcgHlc_C3qe-Wm6fY7ZJv6Oz9zdV9g_ihie2jOwtziUGjkqfSdam-hntXRDfQxGrEccYZYNA4Oieyd7a-wsYmth-1ZI4izYppdFusdNkyPUsQ30K8wLoLmJLIABq0vRePHvHt40CqPXf-cCAYryQ1gNXSluzANfU4ZdYkpazeSInEQonqPnYFI1stdfKDWvfxsYS15fLF1I6OFSYye2qOFH9_PnlGAWnLAuMV6Wpf8fn0

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=172058166

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=PGNPWxsF4_9ZxllDpF4v08q87VVKuPfl3XDs7xpspzKYmVSk6qVn3BvAG7vizS9xgSt_I5xmyM9raiixmrKo6vBZJc94b3TUYS0dfhOHr_Pn0GFT2L2EoGKnhqEUSCUAYJwbcgjvHsEQ2utyz_ZpvsHBGuy0W7z76171V6QPaL7Fig8gJWkK6HeYx7Uv-ZHzKitXNnfVygMacQEU0DMHD9nAs4_SPALC3ajYdpViIfUz9xcoYWPNgAktKhLHdhzGuXdm_zhDuAHo9vG0IWizKHcWocNB0ErXs19Vhyqyv4t7ZeMFhwaSBrVbnvoLKf1oZaqL3B51cJaolBM1klvXpabqhFb-xQqiQALq9UhvDNP-I3feB4HDxA_T5DowhvvzM8PuSUDUpg1xRPoD2Q

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=US&cb=330119787

http://files5.mirror8.net/dl?bc=919437&aid=176681

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=n1oxrAWgtqE3M0lYxVt3qTwwUPSP3pLndtgrGn9wf3FP8cr45SdTkhDS2CbWLUG5r71pA9A6mLQxncTRaJuVsgkB7T6nMEeCQA2anhWrB0oMziXQNxNn_lBPbtT64uIN_oj7Kfu2PEpzjjNXpz9uBJ7g4qJatBlSIQlIdc4KuD8jln9cLD66R_pyv6mbAeJwQo6yYMghmRQBieoBup605bMtbjbVBDbxxmlO5T8O4ld6Xi6K-_ubxOCIbwhqn4aHRPHTcnflvusfO43KkIXonQtIKqun9z2x3XmBDpmOl0Wt2uReGAYf5poYgI0rkqAZm5LAptR0PiAsuLY-JqnVPvl64NHfaJ88E8PRPvFm5RziwmNhP7MX1e6If7nWHae7QFO-MspRxUx9YECvk8whesfTxKmeDltkfQ

Remove uplayermediaplayer-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.