home

uninstall.exe

vumaa.com

The application uninstall.exe by vumaa.com has been detected as a potentially unwanted program by 3 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program RadPlayer by RadPlayer. This file is typically installed with the program RadPlayer by MyRadioPlayer.
Publisher:
RadPlayer  (signed by vumaa.com)

Product:
RadPlayer

Version:
4.0.1.0

MD5:
826f8f25e9a7abcfa89fa3af6837aeaa

SHA-1:
3201902dfd05cf7da03a3acd51058a5150424bb1

SHA-256:
5b5f32aed08c912ea8aa3dc37c584ac034e6df55ce65e1085cff8657633e01cb

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
11/23/2024 5:21:25 PM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
Adware.Plugin.222
9.0.1.0199

Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen
1.0.0.1015

Reason Heuristics
PUP.vumaa.Installer (M)
16.1.3.13

File size:
530.5 KB (543,208 bytes)

Copyright:
© RadPlayer All rights reserved.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Program Files\radplayer\uninstall.exe

Digital Signature
Signed by:
vumaa.com

Authority:
Symantec Corporation

Valid from:
5/20/2015 8:00:00 PM

Valid to:
5/20/2016 7:59:59 PM

Subject:
CN=vumaa.com, O=vumaa.com, L=San Leandro, S=California, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
76E787BD1F62AC42BDA87B7DF6F59E21

File PE Metadata
Compilation timestamp:
12/5/2009 5:53:24 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:u183P/0UDeSmVusNbYSAKXdrcPhg0ZqepaQp7tkrRB5ldozICJRYNLeAOiu360:hkUDDsNbYSAKXdddYt0x0TJELecwF

Entry address:
0x355E

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, B8, A7, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 80, 40, 00, 53, FF, 15, 88, 82, 40, 00, 6A, 08, A3, 98, 10, 43, 00, E8, D6, 2E, 00, 00, A3, E4, 0F, 43, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, E8, A7, 42, 00, FF, 15, 58, 81, 40, 00, 68, AC, A7, 40, 00, 68, E0, 07, 43, 00, E8, DC, 29, 00, 00, FF, 15, AC, 80, 40, 00, BF, 00, 70, 43, 00, 50, 57, E8, CA, 29, 00, 00...
 
[+]

Entropy:
7.8981

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

Program Uninstaller
Program name:
RadPlayer

Display publisher:
RadPlayer

Display version:
4.0.1

Uninstall string:
C:\Program Files (x86)\RadPlayer\Uninstall.exe


The file uninstall.exe has been discovered within the following program.

RadPlayer  by MyRadioPlayer
Publisher's description - “MyRadioPlayer is a free downloadable radio station application that acts as a search engine for all of radio: songs, artists, shows and stations. Search for your favorite artist and listen to their music.”
myradioplayer.net
38% remove it
 
Powered by Should I Remove It?

Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.