Versions

2.2.1.5	5.56%
2.2.1.3	50.00%
2.2.1.3	5.56%
2.2.1.3	38.89%

There are 4 versions of sndappv2.exe in the wild, the latest version being 2.2.1.5. It is started as a Windows Service with the name 'sndappv2' and described as “Sets and maintains sndappv2 LSP protection on this computer.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 3.42 MB. The file is a digitally signed and issued to Sendori by VeriSign. Some variations of the file have been seen to be installed with the program Sendori from Sendori, Inc.. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 14.75 MB with the maximum memory reaching around 16.43 MB. Addionally, typically read and write I/O disk operations is about 6.49 KB per minute for reads and 8 Bytes per minute for writes.

sndappv2.exe is the Windows service (named sndappv2) part of Sendori that runs when Windows starts regardless if Senori is active. Sendori.com provides a in the domain space. Rather than parking domain names on a page with search listings the company’s service partners domains with advertisers in specific sectors. Sendori apparently has applied to patent their technology. Advertisers looking for traffic on a given topic can buy direct navigation traffic from Sendori’s domain name clients.