regmyradioplayer64.exe

Regmyradioplayer64.exe

vumaa.com

The application regmyradioplayer64.exe by vumaa.com has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program RadPlayer by MyRadioPlayer.
Publisher:
myradioplayer  (signed by vumaa.com)

Product:
Regmyradioplayer64.exe

Description:
RegisterLSP

Version:
2.3.1.5

MD5:
93a1c8af0b7615b77ece273d8b8d8b0c

SHA-1:
f2be2d264da66651aad112cc43793869e73ff0a8

SHA-256:
b9869f9a5593aebd891bf802a2dbfdfee9daf686cecb1061490c37b92382801e

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 4:58:25 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.vumaa (M)
16.1.3.13

File size:
400.4 KB (410,024 bytes)

Product version:
2.3.1.5

File type:
Executable application (Win64 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\radplayer\regmyradioplayer64.exe

Digital Signature
Signed by:

Authority:
Symantec Corporation

Valid from:
5/20/2015 5:00:00 PM

Valid to:
5/20/2016 4:59:59 PM

Subject:
CN=vumaa.com, O=vumaa.com, L=San Leandro, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
76E787BD1F62AC42BDA87B7DF6F59E21

File PE Metadata
Compilation timestamp:
1/2/2015 5:13:07 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
9.0

CTPH (ssdeep):
6144:GwqP7xiGFZU8K3FgljQtWUY2BJx5hpsWLKFf0qi38gpr:G3jxk8aaUnLKFfFQ

Entry address:
0x31670

Entry point:
48, 83, EC, 28, E8, 97, 9C, 00, 00, 48, 83, C4, 28, E9, 56, FE, FF, FF, CC, CC, 48, 89, 54, 24, 10, 4C, 89, 44, 24, 18, 4C, 89, 4C, 24, 20, 53, 48, 83, EC, 60, 48, 85, D2, 75, 25, E8, 82, 05, 00, 00, 48, 83, 64, 24, 20, 00, 45, 33, C9, 45, 33, C0, 33, D2, 33, C9, C7, 00, 16, 00, 00, 00, E8, BB, DA, FF, FF, 83, C8, FF, EB, 55, 48, 85, C9, 74, D6, 48, 89, 4C, 24, 40, 48, 89, 4C, 24, 30, 4C, 8D, 8C, 24, 80, 00, 00, 00, 48, 8D, 4C, 24, 30, 45, 33, C0, C7, 44, 24, 38, FF, FF, FF, 7F, C7, 44, 24, 48, 42, 00, 00...
 
[+]

Entropy:
6.1174

Code size:
283 KB (289,792 bytes)

The file regmyradioplayer64.exe has been discovered within the following program.

RadPlayer  by MyRadioPlayer
Publisher's description - “MyRadioPlayer is a free downloadable radio station application that acts as a search engine for all of radio: songs, artists, shows and stations. Search for your favorite artist and listen to their music.”
myradioplayer.net
38% remove it
 
Powered by Should I Remove It?

Remove regmyradioplayer64.exe - Powered by Reason Core Security