home

InkSaver.exe

InkSaver

Software 2000

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘InkSaver’. This is installed with InkSaver.
Publisher:
Software Imaging Limited  (signed by Software 2000)

Product:
InkSaver

Description:
InkSaver Configuration UI

Version:
2.0.500.0100

MD5:
f11455fb1e6e4d94a1b8a9fc652a8ecb

SHA-1:
595f351d65fecda94ac823537fbb38587d8bd6f5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:35:07 AM UTC  (today)

File size:
581.3 KB (595,240 bytes)

Product version:
2.0.500.0

Copyright:
Copyright(C) 2008 Software Imaging Limited

Original file name:
InkSaver.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\inksaver\inksaver.exe

Digital Signature
Signed by:
Software 2000

Authority:
VeriSign, Inc.

Valid from:
6/27/2006 4:30:00 AM

Valid to:
7/24/2009 4:29:59 AM

Subject:
CN=Software 2000, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Software 2000, L=Oxford, S=Oxfordshire, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3E42A519AC54D97D18490DA405DC24EA

File PE Metadata
Compilation timestamp:
6/23/2009 10:01:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:7qXdLnFFOPzdZVZtZQe5WQWiZSNNNWzBP8N0v8DvzazY7VlQ8mMqNN+qz:7S7OrWNNNWdP8eMvzmoVlQ8KNNtz

Entry address:
0xE5E8

Entry point:
55, 8B, EC, 6A, FF, 68, 78, 64, 41, 00, 68, C4, 05, 41, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 94, 61, 41, 00, 33, D2, 8A, D4, 89, 15, 58, 02, 42, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 54, 02, 42, 00, C1, E1, 08, 03, CA, 89, 0D, 50, 02, 42, 00, C1, E8, 10, A3, 4C, 02, 42, 00, 6A, 01, E8, 74, 0B, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, C3, 00, 00, 00, 59, E8, CC, 33, 00, 00, 85, C0, 75, 08, 6A, 10, E8, B2, 00, 00, 00, 59, 33, F6, 89, 75...
 
[+]

Entropy:
4.8397

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
84 KB (86,016 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InkSaver

Command:
C:\Program Files\inksaver\inksaver.exe hide


The file InkSaver.exe has been discovered within the following program.

InkSaver  by Software Imaging Limited
www.inksaver.com
About 6% of users remove it
 
Powered by Should I Remove It?

Scan InkSaver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.