» Leawo Blu-ray Player.exe
Overview
Analysis
File Details
Behaviors (1)

Leawo Blu-ray Player.exe

Leawo Blu-ray Player

Shenzhen Moyea Software

The executable Leawo Blu-ray Player.exe has been detected as malware by 7 anti-virus scanners.

File name:

Publisher:

Leawo (signed by Shenzhen Moyea Software)

Product:

Leawo Blu-ray Player

Version:

1.8.1.7

MD5:

9cd16207efa98d232676a4b470674a3b

SHA-1:

c19851f66dc868e62971aafc474bb9dcfc781256

SHA-256:

29b9d633588f83fc27553792986ae30ed769daa70499988d0f9b9b01a41f1bf3

Scanner detections:

7 / 68

Status:

Malware

Analysis date:

9/17/2026 3:19:13 PM UTC (today)

Scan engine

Detection

Engine version

Bitdefender

Gen:Variant.Graftor.60896

1.0.20.145

Emsisoft Anti-Malware

Gen:Variant.Graftor.60896

8.15.01.29.07

F-Secure

Gen:Variant.Graftor.60896

11.2015-29-01_5

G Data

Gen:Variant.Graftor.60896

15.1.24

IKARUS anti.virus

Win32.SuspectCrc

t3scan.1.8.6.0

MicroWorld eScan

Gen:Variant.Graftor.60896

16.0.0.87

Trend Micro House Call

Suspicious_GEN.F47V0116

7.2.29

File size:

13.5 MB (14,185,968 bytes)

Product version:

1.8.1.7

Original file name:

Leawo Blu-ray Player.exe

File type:

Executable application (Win32 EXE)

Language:

English

Common path:

C:\Program Files\leawo\blu-ray player\leawo blu-ray player.exe

Digital Signature

Signed by:

Shenzhen Moyea Software

Authority:

VeriSign, Inc.

Valid from:

6/26/2013 1:00:00 AM

Valid to:

7/27/2015 12:59:59 AM

Subject:

CN=Shenzhen Moyea Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Shenzhen Moyea Software, L=ShenZhen, S=GuangDong, C=CN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3C4080057DE4B37A48E6A7BA6CCF0E07

File PE Metadata

Compilation timestamp:

1/15/2015 2:31:03 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

393216:rMXCEq49wsWPBtlRSukChEn+L44YoeOjAtDX:YXJq+wlDlkCh2DX

Entry address:

0x2782874

Entry point:

68, 3B, FE, 4C, F2, 66, 89, 14, 24, 68, 9A, 50, C4, 08, 60, C7, 44, 24, 24, 1B, 06, 50, 84, E8, D9, 3C, B0, FF, DE, 6A, F5, 26, 5A, 99, BE, 85, DA, 6F, B9, 05, F6, 4D, AD, 10, EE, 59, 85, 3B, F2, 43, 81, 3B, C6, 7E, 99, 20, CA, 79, B1, 04, D2, 60, 55, 24, 99, A8, 2A, DF, CB, 9B, C4, 76, A3, 25, 64, C2, 57, 05, C4, 4D, 05, 3C, 48, 97, C8, 7A, 9F, 62, CC, B2, 7F, 20, 90, 5F, EF, D8, 1B, 4A, 7D, E0, D0, 13, 2E, 39, 88, 5F, C0, B0, EB, 32, 38, 42, 31, B8, C6, 85, BF, 2C, 8D, 2F, 30, 40, 77, C0, FD, 02, 92, AB... 
[+]

Entropy:

7.9498 (probably packed)

Code size:

11.6 MB (12,128,256 bytes)

Autoplay Handler

Display name:

BDPlayerCDOnArrival

Remove Leawo Blu-ray Player.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.