» windapp uninstall.exe
Overview
Analysis
File Details
Programs (1)

windapp uninstall.exe

WindApp

Windapp

The application windapp uninstall.exe, “WindApp installer” by Windapp has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is typically installed with the program WindApp (remove only) by Nosibay which is a potentially unwanted software program.

File name:

Publisher:

Nosibay (signed by Windapp)

Product:

WindApp

Description:

WindApp installer

Version:

3.0.643.0.61202

MD5:

8e46c33539287530eef5dd6d5ac46679

SHA-1:

fae330129720e58fcda99f653b0c22f45a84dc97

Scanner detections:

2 / 68

Status:

Potentially unwanted

Analysis date:

11/25/2024 9:44:39 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Optional.Nosibay.Installer.Meta (M)

15.6.19.11

Trend Micro House Call

Suspici.CCAB75E6

7.2.206

File size:

584.5 KB (598,576 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Common path:

C:\Documents and Settings\{user}\Local settings\temp\{random}.tmp\windapp uninstall.exe

Digital Signature

Signed by:

Windapp

Authority:

Windapp

Valid from:

7/24/2014 2:07:07 PM

Valid to:

1/1/2040 12:59:59 AM

Subject:

CN=Windapp

Issuer:

CN=Windapp

Serial number:

07D00BC1D3269EAF4C01F64E3E80D0E6

File PE Metadata

Compilation timestamp:

12/5/2009 11:50:52 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

6144:Ae34+ATc6YHey2ZYc6Hknq73ZX8wjveEtt2NB6+sCrLfXc0Ff2I03bQUDk43ohe6:JSLYz2TqNyEWfXs4bN2fHrTquidaKrsq

Entry address:

0x30FA

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00... 
[+]

Packer / compiler:

Nullsoft install system v2.x

Code size:

23.5 KB (24,064 bytes)

The file windapp uninstall.exe has been discovered within the following program.

WindApp (remove only) by Nosibay

WindApp is an web browser advertisement extension that delivers ads to the user's web browser. Ads are in the form of traditional banners as well as context-hyper links.

81% remove it

Remove windapp uninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.