FreeGamer Installer is an installer which bundles legitimate applications with offers for additional third party applications that may be unwanted by the user. Such third party applications are typically installed onto users’ computers by default, but may include an option to ‘opt-out’ during or after the installation process.
FreeGamer Installer exhibits the following characteristics:
File Information
- Size
- 420K
- SHA-1
- b5d3d4a4099265109d77d797c30615cc469ab370
- MD5
- b28f55edba78ca7c040181c4cd966900
- CRC-32
- 4bb16555
- File type
- Windows executable
- First seen
- 2012-11-18
Runtime Analysis
Dropped Files
- c:\Documents and Settings\test user\Local Settings\Temp\nsm4.tmp\J\DA.exe
- c:\Documents and Settings\test user\Local Settings\Temp\nsm4.tmp\modern-wizard.bmp
- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\S-1-5-21-1202660629-1454471165-1275210071-1003
- c:\Documents and Settings\test user\Local Settings\Temp\rnsetup0.exe
- Size
- 638K
- SHA-1
- cd6bbe130210d0c185a511011928187617a4299a
- MD5
- 5817219b84888e402605d65c49957702
- CRC-32
- 32cf8ba7
- File type
- Windows executable
- First seen
- 2012-02-01
- c:\Documents and Settings\test user\Local Settings\Temp\nsm4.tmp\nsDialogs.dll
- C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\S-1-5-18
- c:\Documents and Settings\test user\Local Settings\Temp\nsm4.tmp\System.dll
- c:\Documents and Settings\test user\Local Settings\Temp\nsm4.tmp\bg.bmp
- Size
- 38K
- SHA-1
- 3f1b019e01381d228243750716d58721b3b20aa4
- MD5
- 0a0e4aade93f2a100e8cb36e08161099
- CRC-32
- e4240c03
- File type
- Device-independent bitmap (DIB) file
- First seen
- 2012-10-25
- c:\Documents and Settings\test user\Local Settings\Temp\nsm4.tmp\inetc.dll
- Size
- 21K
- SHA-1
- 4da9dd5427c0fdfa2cce3ee29ac5147b74ff3834
- MD5
- 9a7d35d1e9e5dfb6a7872d49cf64db83
- CRC-32
- 8ca124e7
- File type
- Windows executable
- First seen
- 2011-05-22
Processes Created
- c:\docume~1\support\locals~1\temp\nsm4.tmp\j\da.exe
- c:\docume~1\support\locals~1\temp\rnsetup0.exe
HTTP Requests
- http://firstrun.real.com/geoloc/extended
- http://log.realone.com/rpinst/log.txt
- http://www.freegamer.info/r2/
DNS Requests
- firstrun.real.com
- log.realone.com
- www.freegamer.info