How to remove WinSnap64.exe

WinSnap64.exe

The module WinSnap64.exe has been detected as PUP.Generic

WinSnap64.exe
Remove WinSnap64.exe

File Details

Product Name:

WinSnap
Company Name:

NTWind Software
MD5: 88259fc13fad069add97f3fcaf08091f
Size: 5 MB
First Published: 2026-02-16 23:00:52 (2 weeks ago)
Latest Published: 2026-02-16 23:00:52 (2 weeks ago)
Status: PUP.Generic (on last analysis)
Analysis Date: 2026-02-16 23:00:52 (2 weeks ago)

Overview

Signed By: Avdonin Aleksandr Nikolaevich Ip
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%programfiles%

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x000a22a8

PE Sections:

Name Size of data MD5
.text 2618880 d3cf204d243d120097db1cbae8910364
.rdata 1149440 88c301a11903e7ba6c33f452dd95d6c5
.data 87040 dd1f632d5772cfcc81744d29649fa7e3
.pdata 161792 da3e50a134d1f6bfe92b15f5cb240bdb
.gfids 17920 9fa2c3cefca2dad13bd78c1e517a8683
.giats 512 da10c5cb5549c1d43b5c55b169c51109
.tls 512 1f354d76203061bfdd5a53dae48d5435
.rsrc 1581056 421ce259e9c4d0bd931016d7b3ab47fa
.reloc 89600 dd0413f4abd19844eda08cb2683fddb9

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for WinSnap64.exe
copyright for information about WinSnap64.exe