home

MyWPE.exe

My WinPopup Express

NAMTUK - SOFED

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘MyWinPopupExpress’.
Publisher:
Namtuk  (signed by NAMTUK - SOFED)

Product:
My WinPopup Express

Description:
WinPopup Express, LAN instant messenger.

Version:
2005.02

MD5:
63c2fd1f7a163e39103a41d9840410d5

SHA-1:
9a374a9f2ee0e3355203b613c52a5ebc1b556730

SHA-256:
3c6314f9c3282e6987630269072857af6d273e6a598bce77d81263d865ebe06d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 9:58:59 PM UTC  (today)

File size:
824.5 KB (844,320 bytes)

Product version:
2005.02

Copyright:
Namtuk

Trademarks:
Namtuk

Original file name:
MyWPE.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\namtuk\my winpopup express\mywpe.exe

Digital Signature
Signed by:
NAMTUK - SOFED

Authority:
The USERTRUST Network

Valid from:
9/1/2006 3:00:00 AM

Valid to:
9/2/2007 2:59:59 AM

Subject:
CN=NAMTUK - SOFED, O=NAMTUK - SOFED, STREET=27 rue du calvaire, L=Gévezé, S=Ild, PostalCode=35850, C=FR

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
1358790BB201BB4B75CA3ED614140A6B

File PE Metadata
Compilation timestamp:
1/19/2007 3:50:59 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:+vMQah9v5SbS8FWr8hqDBgdZtWloY+uOjXDqOOZz5NT72TpoawEoFP3nVAwU4v:RQahPSbS8WNeTpoawEoV5

Entry address:
0x6C64

Entry point:
68, B8, E8, 41, 00, E8, F0, FF, FF, FF, 00, 00, 40, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, ED, A3, B7, 50, E0, E4, 51, 42, 81, 7F, 5D, BB, D0, 5D, DA, 6C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 48, 00, 86, 50, AB, 02, 4D, 79, 57, 50, 45, 00, 3C, 01, 00, 00, 00, 00, 64, 0A, 3C, 01, 00, 00, 00, 00, 88, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 0C, 00, 00, 00, 38, 15, 25, 79, FC, 73, BF, 45, BB, B2, ED, 71, 32, 67, AA, 36, 01, 00, 00, 00, 98, 00, 00, 00, A8, 00, 00, 00, 01, 00, 00, 00...
 
[+]

Entropy:
6.1930

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
800 KB (819,200 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
MyWinPopupExpress

Command:
C:\Program Files\namtuk\my winpopup express\mywpe.exe


Scan MyWPE.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.