home

player.exe

friendlyway player 9

Friendlyway AG

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘friendlywayPlayer’.
Publisher:
Friendlyway AG  (signed and verified)

Product:
friendlyway player 9

Version:
5.6.5162.1

MD5:
28c4fde991092b5303292c050c21094f

SHA-1:
8e0b121ddf7d2179ad8f0fe245ae26577b3963f8

SHA-256:
743430c30ca8a2502850903095b9f933391bfd7e6a7a2ce4cbe0b663d0a8769f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 12:13:19 AM UTC  (today)

File size:
2.1 MB (2,155,992 bytes)

Product version:
5.6.5162.1

Copyright:
Copyright 2010, friendlyway AG

Original file name:
player.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\friendlyway ag\friendlyway player 9\player.exe

Digital Signature
Signed by:
Friendlyway AG

Authority:
COMODO CA Limited

Valid from:
10/5/2011 4:00:00 AM

Valid to:
10/5/2013 3:59:59 AM

Subject:
CN=Friendlyway AG, O=Friendlyway AG, STREET=Feringastr. 9, L=Unterfoehring, S=Bavaria, PostalCode=85774, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00DAF86358E19BB0BD506BDCA82BE247D2

File PE Metadata
Compilation timestamp:
10/27/2011 1:33:18 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x1C54EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
3.9196

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.8 MB (1,851,392 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
friendlywayPlayer

Command:
"C:\Program Files\friendlyway ag\friendlyway player 9\player.exe" \autostart


Scan player.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.