home

snappea-snappea.exe

SnapPea

Wandou Technology Ltd

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from www.lo4d.com and multiple other hosts.
Publisher:
Wandou Labs  (signed by Wandou Technology Ltd)

Product:
SnapPea

Version:
2.76.0.6535

MD5:
fa4f7c416c6edea1c5581f4230014426

SHA-1:
44f1e93949bb4616c496f5cedcf78a6f432226ee

SHA-256:
534e2e970a796b95e19b9d231f0ce63fc316cf1f1f67dda9797300da7040bb20

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 5:10:06 AM UTC  (today)

File size:
31.6 MB (33,149,232 bytes)

Copyright:
Wandou Labs all rights reserved.

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Digital Signature
Signed by:
Wandou Technology Ltd

Authority:
VeriSign, Inc.

Valid from:
4/3/2013 2:00:00 AM

Valid to:
6/3/2015 1:59:59 AM

Subject:
CN=Wandou Technology Ltd, OU=Wandou Technology Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Wandou Technology Ltd, L=Beijing, S=Beijing, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
741000F601812EB36CC3659E15D61689

File PE Metadata
Compilation timestamp:
4/10/2010 2:19:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
786432:Jfro1LutXcxhr3okc2B3HwhIwqm6Z3akhAf3rUNHg:JTG65gNYCB3QhIw16Z23rOg

Entry address:
0x354B

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 84, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 98, 06, 47, 00, E8, 67, 27, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, 05, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 86, 40, 00, FF, 15, 80, 81, 40, 00, 68, 04, 86, 40, 00, 68, A0, 85, 46, 00, E8, 35, 26, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 10, 4C, 00, 57, E8, 23, 26, 00, 00...
 
[+]

Entropy:
8.0000

Packer / compiler:
Nullsoft install system v2.x

Code size:
25 KB (25,600 bytes)

The file snappea-snappea.exe has been discovered within the following program.

Toolwiz Time Freeze 2015  by ToolWiz
www.Toolwiz.com
About 5% of users remove it
 
Powered by Should I Remove It?

The file snappea-snappea.exe has been seen being distributed by the following 50 URLs.

http://www.lo4d.com/get-file/snappea/.../

http://www.grabupdateshare.com/s25SbyTGGS7kMQgsHjRT28vWpvmde67MpEwg7jY6oyQh QPJuooVdZQYW4h Nu6ivD42ZBm2txdIbuWMdRzLjaYfALudFHKZhI4LQw9MXIt47ta0zIqzn R7waEwEjkcJIB90l4NFGH6IGfRbI1MFyj xbGOVM8HVWr3hIPCwF5PtoGQh79galbpW4oTHEsgWQXM5_rSA34H5NC2nw62a_1Oep8g6Gp9Hy_KYyuao084B7hgZjvZ06s7xjkP2ZqTf3Bi_tfdbCCxpgiL6WPp1OJ_kcQZTbtqxd_xVEsv7bD3KAV2ZPv_oD_WRYO3NT5vsM02PRJPVmk8Lc6KuZZgpWgBEQ4asoACNviJrfD9euC_YyhbydB20CGrb1ONShXALkCh1NNh9IoOobmPJIVheXimPsAT6_HwZquwZqUInXZn_rHxj9W5s1ZJJk35Smf9 IiLXN5zfypNpdNIYm0ljC5Xv5gJUtOqpnnBxlH1Dbd_Nd AYKuVGAtducLTBk1_RFS_JbVnizZrxaT geAvMFcU X43McOt2kzZ4VbXuN1uq4urBz_1 h5rnU8Vk6DX0E63ZCMHDIWnygKyTv9RiYFqfoBAZi_kB4n18hUvPJo979M3OWXW6vogj0aBU8ihuBaPlvtd-G0wAAGTwHNoqQEcJUu8Ah9z8oNgCCQMN1Opr80C sYwCxr53D9NzOV1qbSDmmEKukYJhTbttEngJkAIgIDjlwFDENn8D-e

http://www.lo4d.com/get-file/snappea/.../

https://docs.google.com/uc?export=download&confirm=1OtQ&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

https://docs.google.com/uc?export=download&confirm=oyVu&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

http://www.lo4d.com/get-file/snappea/.../

https://docs.google.com/uc?export=download&confirm=KR7h&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

http://ftp-stahuj.centrum.cz/dl/8397ff4f2ca2d178af3b87fd96f0d3cb/586540f9/stahuj/download/software/secured/s/snappea/.../SnapPea-snappea.exe

https://docs.google.com/uc?export=download&confirm=Xsmz&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

https://docs.google.com/uc?export=download&confirm=xdvo&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

https://docs.google.com/uc?export=download&confirm=FA3b&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

https://docs.google.com/uc?export=download&confirm=stXo&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

q=http://dl-master.snappea.com/installer/.../latest&redir_token=NIDZ8vxNBBz4zJLXqtedMLwi0td8MTQzMzEwOTAxMUAxNDMzMDIyNjEx

https://jalantikus.com/apps/download/.../

https://docs.google.com/uc?export=download&confirm=6KgP&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

https://docs.google.com/uc?export=download&confirm=8h_d&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

https://kpv.app.box.com/index.php?rm=box_download_shared_file&shared_name=z5ckogpel09eboimj42w9sqn516n0kov&file_id=f_50431185285

http://www.lo4d.com/get-file/snappea/.../

https://docs.google.com/uc?export=download&confirm=CfOP&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

https://docs.google.com/uc?export=download&confirm=1_7f&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

https://cloclo22.cldmail.ru/29gcHRYzNr3Y66C9QngV/G/.../4MrnVqhBC?key=11269cea9e6ab12b6321095ace0b58b32bdc885f

https://docs.google.com/uc?export=download&confirm=ZD3k&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

http://www.lo4d.com/get-file/snappea/.../

https://ocr.app.box.com/index.php?rm=box_download_shared_file&shared_name=9ghfgczr7figo683tslqa6ut16zazqdy&file_id=f_23968587659

http://i.download.idg.pl/fannef/eff2ed0008a8f94832ec49d8c7569811/576608ca//vol2/w95/mobile/.../SnapPea_2.76.0.6535.exe

https://drive.google.com/uc?export=download&confirm=X39G&id=0B0AYXoRSFu6SdDBfS3NCVlJnNjA

https://docs.google.com/uc?export=download&confirm=sEEC&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

http://www.lo4d.com/get-file/snappea/.../

http://www.lo4d.com/get-file/snappea/.../

https://docs.google.com/uc?export=download&confirm=va2Z&id=0B2H2_WfC2XI4YkxIV3Q4cDJyUU0

Latest 30 of 50 download URLs

Scan snappea-snappea.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.