home

uplayermediaplayer-setup.exe

Full Spectrum Interactive

The application uplayermediaplayer-setup.exe by Full Spectrum Interactive has been detected as a potentially unwanted program by 9 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from network.adsmarket.com and multiple other hosts.
Publisher:
Full Spectrum Interactive  (signed and verified)

MD5:
fb4746f9a91fb03247de2caa85bd66c9

SHA-1:
fb780899e862e174b81161fc574d38b6c0f259f6

SHA-256:
7ad29e1edd017b00e5b1e0f6298137fa8d1540c5fc661bdf3c4063b34ac858bf

Scanner detections:
9 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 6:30:56 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
MalSign.InstallC
2015.0.3497

Dr.Web
Adware.DownloadAdmin.1
9.0.1.0111

ESET NOD32
Win32/DownloadAdmin
8.9117

herdProtect (fuzzy)
variant of delugetorrentclient-setup.exe (Adware)
2014.7.8.4

Malwarebytes
PUP.Optional.FullSpectrumAdmin
v2014.04.21.08

NANO AntiVirus
Trojan.Win32.Downware.crgjbr
0.28.0.59492

Reason Heuristics
PUP.Installer.FullSpectrumInteractive.Y
14.4.19.8

Sophos
Download Admin
4.95

VIPRE Antivirus
DownloadAdmin
23896

File size:
576.7 KB (590,496 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\uplayermediaplayer-setup.exe

Digital Signature
Signed by:
Full Spectrum Interactive

Authority:
VeriSign, Inc.

Valid from:
6/11/2012 1:00:00 AM

Valid to:
6/11/2014 12:59:59 AM

Subject:
CN=Full Spectrum Interactive, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Full Spectrum Interactive, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1A1AEF489C94F2C514EA16B9BEBCDEFC

File PE Metadata
Compilation timestamp:
6/22/2012 7:07:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:TYQxt2ctKQEGvjITZD+jcEckHnyudpc5y/zDnYDBrfw8Ar:TlxIQEMIT5dAzc5y/zUDBr0

Entry address:
0x333B

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B0, 73, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, C0, 70, 40, 00, 53, FF, 15, 88, 72, 40, 00, 6A, 08, A3, B8, 3C, 42, 00, E8, 2C, 25, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 3B, 42, 00, 8D, 44, 24, 38, 50, 53, 68, 43, 74, 40, 00, FF, 15, 64, 71, 40, 00, 68, 38, 74, 40, 00, 68, C0, 33, 42, 00, E8, 1D, 24, 00, 00, FF, 15, BC, 70, 40, 00, 50, BF, 00, 90, 42, 00, 57, E8, 0B, 24, 00, 00...
 
[+]

Entropy:
7.9663

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file uplayermediaplayer-setup.exe has been seen being distributed by the following 38 URLs.

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=EX-roNLA0gx6b3gLewPYR9iC0TrkQ7p-AVPbGKPyuGgDaHbK4Efo0sZR6zXeiYWz9CJy4SQRuct_QPXGRpq30_DAxTGp8n4vAPorla2iyeODjJhNmlCZDZHcrhwvZ6r-U6cqbXfzymH5LJaIR1F3s-OonhRJP75MJ0aezIARErfiUmih2HhLOEE0l96oSArrsf2SRxpY33BLnfGHsbZmPJXUGxB-4OjHSSPu5X3c3r7pdFOHwrUGiN5y6t7JrC8WB-L6mIoe792KrqXgSjrsQKpg4eTUGyTd8VKOcvtvjH1YBV0vX2te-K5ACd9YmqbiFfJrTzfhI_ZzMnxPoALNEPdAxCD7K4mKitTNvWQFqaxMR5sVwOWG8wY6zxID8cTlv7H9BOkdoN1EYVg

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=-833785955

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=1081375679

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=582652653

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=m4sat2_sb-FTM3unc-xeHX8G4pro2OmQXVPIkXFUFCSECBz3RhwfQG6LnhSMGoAxvvDlFSjWgfdjRhPW7KiNtyerlSnufJCpsz4oiwT_z2tljGa04FZqY5UXJsOjo7q069SLSRJ2hTSDrwujfB9U5COJls08KEPcAodI6J42d4NReiap0-nBYqhsNMJggdXk7oD79e4yLBqU4itUhqojl-frTer2H7D0HGXnKMGp1rdrkwYYOjTyCZW1ucqZZd5m6SO-1ulldbAJzPG9jQvECuY0FKZF9uEvi1kxBTp2GEdJ7ok7j4CZc_1c1HCA8-K3JBNd9LC4GYWD1t8wrVFUSYngWjdhlibw-ksAfmP1ON56kuIErs4

http://s.m2pub.com/event/click/0/m4sat2_sb-FTM3unc-xeHX8G4pro2OmQXVPIkXFUFCSECBz3RhwfQG6LnhSMGoAxvvDlFSjWgfdjRhPW7KiNtyerlSnufJCpsz4oiwT_z2tljGa04FZqY5UXJsOjo7q069SLSRJ2hTSDrwujfB9U5COJls08KEPcAodI6J42d4NReiap0-nBYqhsNMJggdXk7oD79e4yLBqU4itUhqojl-frTer2H7D0HGXnKMGp1rdrkwYYOjTyCZW1ucqZZd5m6SO-1ulldbAJzPG9jQvECuY0FKZF9uEvi1kxBTp2GEdJ7ok7j4CZc_1c1HCA8-K3JBNd9LC4GYWD1t8wrVFUSYngWjdhlibw-ksAfmP1ON56kuIErs4/.../

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=1361792684

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=n8rdeu3Scq2rZGe6_6mZCMIJnsyMKbz7G7XNvevGUQYOfA7FMCJje2kIhD3QJcZHj7gohQBwVghOYXEJ04WqtMdArhfjcQoOQzC-ZvtKT65nGpB8Wv9TA9boganWyqgutfxWg_mX-HxXefm4HMGxysP0dbduMV0hpbi-ha_pUO1iSW_JsFzDVP7Ckio4rMX-9P9svejBB9q2BDU1g6P8URR8eKNM0Mh7x3lwPMkKEUUNsLYHdK8xCyanQ9GfUYujWCXRwcq1oOEMzC-0AyUQyzzuEm_7vDbfLEnEt_jXjfeu9871DzcrkQa_w8S2e9TehwpDHJ7ZTZhyQGtE_d1jvrxQxDmRFilVodE8Ux9RCXqOgH2_UGoy_PvXkExk6wIoPaI

http://s.m2pub.com/event/click/0/n8rdeu3Scq2rZGe6_6mZCMIJnsyMKbz7G7XNvevGUQYOfA7FMCJje2kIhD3QJcZHj7gohQBwVghOYXEJ04WqtMdArhfjcQoOQzC-ZvtKT65nGpB8Wv9TA9boganWyqgutfxWg_mX-HxXefm4HMGxysP0dbduMV0hpbi-ha_pUO1iSW_JsFzDVP7Ckio4rMX-9P9svejBB9q2BDU1g6P8URR8eKNM0Mh7x3lwPMkKEUUNsLYHdK8xCyanQ9GfUYujWCXRwcq1oOEMzC-0AyUQyzzuEm_7vDbfLEnEt_jXjfeu9871DzcrkQa_w8S2e9TehwpDHJ7ZTZhyQGtE_d1jvrxQxDmRFilVodE8Ux9RCXqOgH2_UGoy_PvXkExk6wIoPaI/.../

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=-882489199

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=7NkCUAgwUopYtxXnbAsEj5_Qbq4Geo3xq4zntN4ECJMSL_Y8l85SD_9lzLZvRTqZDY01jzAbowtiD65I8iSOA5US5jW3CvC49ghBEcdU2_gHRtWHEvsEhIGFtt4LfSbr7q8663YnO5fxQFCPfvcrKGrgJarYChCibUx-uLqu6Rlcw6eIUQLd6Eg8CnlFq5QwiJ0G0oCNbHkiQYlh-LVRSvqTieWzunxLSiwrVsxTwXHEbfqPFCAcmfTckharz0VY4OCzhqmfttJVG-6hl8i-3_xiwB5ZuCNHRRwB0txT62aI5ExlokAmaBUG1YIr1IbsSlPpPgztpWBe2EZRJsAptG_ygijb0QHiC7H2XZF8Kau4-HNxyGqRTFOQ8JLp-TJ2tsxPoOoR

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=1915934300

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=VDizoXHhDM99lXHbkN_C_t3cK6OR_cfV9gaDJn_uX6Cm6LYlqO0J3DvumvsgtUlbaCn6uanNwjJKirOy5GHBIKnavAhYJ3qSWzv9f5AB7YFvkitAEBmYKmJtDXUvjM2Ob4F-_Q5MdW3IVpuSnA26J4O82lhZ9F18lAU1Y6E4QezliXmzGq3BO3dAIMck9wOIDKPH1PtcqU-WZXHSpp_e6uYd8ANfVw_KxBFwS0L2R5JL1bHcUT6d_O6sw1sTVxPTcRzE9W80ql1VoziIgnk45T-1Gr_B0Thrd9To5T4IPGjGB2fn9qQdOtJr63YvujkxtjvgsTF38IxE98OBwAl6Pk1OYBRLJ6u9k8z3UW6jRw22E8RRHPtViwdxA0OKqS67zCDsgv7J

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=-1235418390

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=6cn-GzGwI70MRIUVVZ3qDyxaWvbg6cvDto8Ga9cHbXoU1E2LVWuvekutsM9J5AsmHoMDlbQKMfCImeGtrfThVZP2bOb5LoBBR8LotoeChSDhR3Lo8hNfB_vgmH_J6Y3a_pWAta8k0VFGT6_PteXN5l_3nFg4awwF5bbx_F7PedDPoYP2wbpWE-mjUFxbQJqvZamp0CeZJHui13X7B20eRqH4P-8a7u4PtNNOAUN8iGXbhROJ189tZCf6wNyhfgmxXWHJ0QojanN0KFgdKoDdbsyzss_1eI8O-0vZw7QgU3PGzdkSZ3inaJcQovaF11wjnA5ysULiNwjbt9kNn3qLNX7rupfBGkfd1gNi5RRcA51837uik6tYmaC7cfHN6w0beX9JaL9S

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=20203776

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=VPYGOLgE0addof4vXI8uNIFTxeQSpXpKTcCtPuNyXcZ_R314lHUrAvNJC2fqwQHiY0x583vyQdd3vWEVVERbDu8ghNWbe5MJKYgUBvyqE6VVc0zYZsBnb0KIfsYTNwkQPp8ijVwwH3-WDSAMBl1Eo6zQxkDH4iuDOddoUcaQVVzdxhSTiLjDriWMCDAHE5L6iVPSdYzv-T5WM9pCm9FBBQHUChLY0LxgC01unKUBO2TL-CLUYCQoPZmG5_W3ZRibDSJuMQBvZ4uN70HtfNHSamcl5ca60WbpBsqecMUjzvYeWNk1DNwTkSq5QmtUU6uPN7u3M-A76me46m5eeuScQcAMZKmKX6nLw3yNxjq7cgxtGkz4ntnLVhZ8Fw3xp2Nev4SNQZNz

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=474377434

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=wk5cdBPbDFPuHt1XXr2PUNxe1hfco8eBOqLfnyq_jIVFo8p1bfpmNRojtbv_IBALJHmWVFjKMXgpp2kuqislq66mhyw7GBs_b2EId4rFks7_iaFih84pjvMCh_Pu32Y5AaIMUnaXq3OZ8Y_Bawk2_X4NhzHFiSUOZUuz073gHzT_WUy1pSas0gIaWmsTsmxc7gk1eqn9LMiKkMaAqkRGQE5zX43tNSDz6kRTBgBuoHtwbeGTLNC555VzKgNLZpI_SjDewC4LyNGHZOfGAZt3s8LbUFG3XRh8l4lWhU68loQdh0bmgxSZpHv62g89kvYpyWUJlDohlyfBQkViQMlvsAmyjzcfteKgJb6vD1tuQmudj-qjfgGuEg

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=557465105

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=8qabHv3UoxZu-49cztRn6Wh97uznqUEwCct5Y-hPSPj_sAsIuwpuax3qEjqfnkEI9b049f-zxJK4VGeGG0L2ahSmwQGVMc3F6_jI6CyNrozC5SE-PHXH_HHgj6pVB8jVeC-eM46g9u_r3UiTHG1wroJTx6K6yksU-khgHvHLPgeOjDFUUINc_IldyrgITPc7qTn2GFf_fW_rFCxg34ayJlKKryn-feaowJhWCYyqG6NyDtnRB4r3GT8K5FiLbagnpUexl9RSnrCMC40FDZ2IU-b6RwgSH18n6spjl0_-2d4zXKsQkR7ojJHDZi1l5pXgfHa_Bz0RWHLANHal8u-qVIVZuZp3P1W9TrQmtosFka_Jm2vQRYhXcQ

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=763150734

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=rb2R5ZkHcb1aid8pQF_InDiPg_lBusYYTdr9rnGxvg5fdcZveUheVSVYe6KLXcDvBk8q5dFMjumVLeYUvZpSi1ZrLNnT4hOYdl1NjrNSVrmRPU6soJRSEIkHFklaeuln7gChnwqKqFpYmCx7CLOrPCst6A4MnABO_yBOQDtSiuKjai_si58V4nsC1n7IQJQYWMG61gEp_a3fSzh0epNTesgRYuDQ_JKq6T7xzz9jbkutjPAnlE0p7-hZ8gHyyWrmBRSMX1ryggghTEae6ImfHHPU8bRFqlqRwWY9izmU5kWdEHc1Pcp5sAW7yRvZ6uSdkp_gh_YSjdAugCv31Ywx2cmfteUJRyCBa2yyEOEHqIwkSHyyKRrpog

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=-862465451

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=NMB-IWVJaIZ1xBmWhSsVHZFMc-X14gmGbVJ05CPxToWrQYeMVLoZNZzltHulMpp0CF9iBIZ1xdqcQpMtsohdjHYMvhsNs5Mv5AG3AAmvMtB020A9S1SZX5LmhvNuZqOOD60UGXgyOD6gpYkiXvMtyMOWsWZWidof2VSc1SsYEh2_k9kPmA5elOycxQ0ZknDVFBCXarYu9Xh94VWHEohzH0D5Xtu3iZ9zES8M5Bnm4AnQzH-eROktY_q11jPOzpI7hv8bnvbmhomYmu6kKV_JeLAYatvkNMVxXXp2kOELyz9zw8_xJ5bOZjbd7Prh7CwzBzLoU94jFAml44-TWRjxjGYgA_eIw-iM_81OKDZNG_g0ouBLdT9NYA

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=-542685003

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=inJ-xsB667UO1ZfxrB6DU7i3hp_Wmc1HFcbTgF15CAR3zfXFBGk4OY_Hww0Aim40F0QPtHBK3eKib96GdcjFOLE0YFsLUynSec7fx3YYomTfgt3Pvu2hGNfKPaX7b_f1d2RA9ZfOaGkzviOzGc4MEyDz4s3GUpvudAgC681TaaP2Sn5deJa8ZwYzXfEbkKAyb02rMMTvY5j_HWh1asPpckAuoFzR5EpKx-k6SF9WLNQ_ul2dStT1G9bSlCDksHRvcJc1mg-l9WI98sAMN1UUmMnzZcLzbYErhcYSdBySdL-F7OSiLYRqs35wBoK5nimTI3zo4wNYNFvVtic-QuaipICo9ZR6lzuTK7zvslbyFqB_acAuMifptA

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=311717370

http://network.adsmarket.com/.../iWhvm2acqZWLaW-bX8p6w4iQappgooKYjWKYmWWee5uJkHGaXqF7w45jaZVenA?dp=R-O0bgYgPr_3TKC5DxrO-BZUacJ-60X3h2OVCjfBIcIP8ExBUlfHwECQONwYSdDv8TK02ec9UUUkX3IUt9n0jfDYPRNSx_QcRYXuREekaQnAvLdlKrb-wQRlhqV3fo3BHX02jyOwnq7MTz2abwlOm_05qKTTIAPjT7MXnku0GnR9vD_dvCzcXTJO92vcONNB1aSEUUbC8VevFG-coZ_YSSFl-P8pEfwDlx9Yf9cKvtLZBt-QWY9a45M-95FO0TLIsVnXXuSeVHY8VjeYyvEvsyf7x3VhhMhbGTpPELN6LtcJCBMrIRyYx8ZiEBu3qVDbGBnreNHaWmX9j35EBBlCA9v_Mhw-pjBVmpqo_auGoYSDXa-deiXX2w

http://files4.mirror8.net/download/.../dl?s=matomy&brand=uplayer.us.com&pid=matomy&aid=176681&bc=919437&country=GB&cb=-1981732187

Latest 30 of 38 download URLs

Remove uplayermediaplayer-setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.