home

uplayermediaplayer-setup.exe

Full Spectrum Interactive

The application uplayermediaplayer-setup.exe by Full Spectrum Interactive has been detected as a potentially unwanted program by 9 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from s.m2pub.com and multiple other hosts.
Publisher:
Full Spectrum Interactive  (signed and verified)

MD5:
083f819dbdcf60c33b1d0da8a35b4de6

SHA-1:
fcbaa88c930f4ca1228dc297fd23c597bcd9e12a

SHA-256:
80b9c09c9837f09864a867f1bc155428f2d9a405930987572ddb52e6a4f5b493

Scanner detections:
9 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 5:07:10 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/DownloadAdmin.AL.1
7.11.110.92

Dr.Web
Adware.DownloadAdmin.1
9.0.1.0139

ESET NOD32
Win32/DownloadAdmin
8.8988

K7 AntiVirus
Unwanted-Program
13.173.10043

McAfee
Artemis!083F819DBDCF
5600.7126

Reason Heuristics
PUP.Installer.FullSpectrumInteractive.Y
14.5.19.9

Sophos
Download Admin
4.94

Trend Micro House Call
TROJ_GEN.F47V1011
7.2.139

VIPRE Antivirus
DownloadAdmin
22884

File size:
575.7 KB (589,528 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\uplayermediaplayer-setup.exe

Digital Signature
Signed by:
Full Spectrum Interactive

Authority:
VeriSign, Inc.

Valid from:
6/10/2012 5:00:00 PM

Valid to:
6/10/2014 4:59:59 PM

Subject:
CN=Full Spectrum Interactive, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Full Spectrum Interactive, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A1AEF489C94F2C514EA16B9BEBCDEFC

File PE Metadata
Compilation timestamp:
6/22/2012 11:07:51 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:SYQxt2ctKQEGvjITZD+jcEckHnyudpc5y/zDnYDBrfw8AL:SlxIQEMIT5dAzc5y/zUDBrQ

Entry address:
0x333B

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B0, 73, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, C0, 70, 40, 00, 53, FF, 15, 88, 72, 40, 00, 6A, 08, A3, B8, 3C, 42, 00, E8, 2C, 25, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 3B, 42, 00, 8D, 44, 24, 38, 50, 53, 68, 43, 74, 40, 00, FF, 15, 64, 71, 40, 00, 68, 38, 74, 40, 00, 68, C0, 33, 42, 00, E8, 1D, 24, 00, 00, FF, 15, BC, 70, 40, 00, 50, BF, 00, 90, 42, 00, 57, E8, 0B, 24, 00, 00...
 
[+]

Entropy:
7.9664

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file uplayermediaplayer-setup.exe has been seen being distributed by the following 7 URLs.

http://s.m2pub.com/event/click/0/p1DIIhufFwIP_nXrgGNC_DKkba0snNW_4LBfLWRIRMgfS9qjU588mtlF1cFZfE0YkkiW3PelrbjwWeKxG1xDCEluulJBqQiUsqofq1CM9jJipl6DiqKc9jlCP14iK_CHZZDAci27lM_diNBRQMOwNaqyORqq_fhvTqCJoZ17_UzyhD8hvEjINwEn6PYjBbbVhVjhjHlIgQiwMw3dYAFNYn2WOJj9AwF08HNllQoglSQuDHSBlJQglpaGC_fqUX6L8wVakL53k4an6I6DfDH-a11Vaaxb3bMzvHPCLXwEeMYkcluyHUa_8OrQm-QQXwk67lSvpIaLoPBrSaQyoo0e3hVgEEvTpZDFNE6Nd9rFNFFkj_BEN89MyDPHp-0/.../

http://s.m2pub.com/event/click/0/CLOnQp72_nxZXOUBUp_MvUfzRmxLMxlBaYnb49nZdTNZyNfxwUpJyddUZHsbhShyQFR_3l8j26f7LP4QRU4M-w1tmZfmiYq1LrKwXn9MGyr9Flizojp3WEj0er51Mtp4spi6T9eqWLq5GAwreaMZWUtbHK81HnVx4aafEL8-xOJo-jGXz_ai9gB9CtMfs4Hk0xbfvMXYC0R7vnLREZIpo0u21LLRrcw5QxdE0dN6VK79dGi5eEFCKIJzDeze4KMzr9b04oM6JCjQPpoGN6VTBb6IFz1l2r0-j6r__suVJt6HT0iupC8opDh535_zODo-BtWj4ZM_hQmZCcOrxd3NnZgIFeLbTdCdAck7nepGmKToYYpzBzzQ7Q/.../

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=582531&bc=919437&country=US&cb=-1361952780

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=582531&bc=919437&country=US&cb=-1214581619

http://files5.mirror8.net/dl?bc=919437&aid=582531

http://network.adsmarket.com/.../jWlrmmGcqZiOaWqYX8p6w4iQappgooKYjGKYmWWee5uJkHGaXqF7w45icp5nnA?dp=mgkDPYjwEvxBPxxsXEeO3k1PfljMQacdzKKhFp0gGzVJoO24QFZ0A2GNHlce8tOQvyrzsiWRfQi9YGOkP0tvOjvJJIdD7xuUdCkPsikGcIEvhQVcMWTxHmxfwzuMbLFzyDzyWXl0WG477T1XK864KxAnFZH8twFAqj8YWFpkI7aT1HfqxPqeLldylgRom90y6BqBgsBCFrhYstMxxxVoZgW8El5TjwA3dZBDprCIvPCj3m6e9E9aSeRFTE0aPQHywBgaRHNDnBfWfHtqy_-pUhDraWK8XfWW_nKG7K-EehKVFGJYG6Q7g-Xz9L2PARXrZgVdcs2DsoulrQLvYtNTnp_oo5X-ZkZB__DUrHe5ePcLUwkk2bZoPntzFOT3Bqtj

http://s.m2pub.com/event/click/0/mgkDPYjwEvxBPxxsXEeO3k1PfljMQacdzKKhFp0gGzVJoO24QFZ0A2GNHlce8tOQvyrzsiWRfQi9YGOkP0tvOjvJJIdD7xuUdCkPsikGcIEvhQVcMWTxHmxfwzuMbLFzyDzyWXl0WG477T1XK864KxAnFZH8twFAqj8YWFpkI7aT1HfqxPqeLldylgRom90y6BqBgsBCFrhYstMxxxVoZgW8El5TjwA3dZBDprCIvPCj3m6e9E9aSeRFTE0aPQHywBgaRHNDnBfWfHtqy_-pUhDraWK8XfWW_nKG7K-EehKVFGJYG6Q7g-Xz9L2PARXrZgVdcs2DsoulrQLvYtNTnp_oo5X-ZkZB__DUrHe5ePcLUwkk2bZoPntzFOT3Bqtj/.../

Remove uplayermediaplayer-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.