home

InkSaver.exe

InkSaver

MEDIA NAVI,Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘InkSaver’. This is installed with InkSaver.
Publisher:
Spline Network,Inc.  (signed by MEDIA NAVI,Inc.)

Product:
InkSaver

Description:
Configuration UI

Version:
4.0.205.0004

MD5:
1bb1ea96e99bb6d6557dabee5249b7be

SHA-1:
8deb193e0681f1cbc7c04b19b9804498a6438be2

SHA-256:
deb6ece8745709bfaf3f21529879619595d3dfa097ed59e27a38617a038b3e1a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 11:21:38 AM UTC  (today)

File size:
563.8 KB (577,376 bytes)

Product version:
4.0.205.0004

Copyright:
Copyright© 2011 Spline Network,Inc.

Original file name:
InkSaver.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\inksaver\inksaver.exe

Digital Signature
Signed by:
MEDIA NAVI,Inc.

Authority:
VeriSign, Inc.

Valid from:
11/1/2010 1:00:00 AM

Valid to:
11/2/2011 12:59:59 AM

Subject:
CN="MEDIA NAVI,Inc.", OU=Product Marketing, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="MEDIA NAVI,Inc.", L=Shibuya-ku, S=Tokyo, C=JP

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
73C7114E0C370D4E0B4F260CC88A4FFE

File PE Metadata
Compilation timestamp:
8/5/2011 7:27:24 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:vrzxXJjmqinZ8kBlY54Rca8DPozO/tsuhQEXRJc3y1I4l0jK0YIBAEIZO+IZs8v+:vDyqmBy54RL8D9/ts0RJ3FXJ+P+IX1A

Entry address:
0x7356E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
453.5 KB (464,384 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InkSaver

Command:
C:\Program Files\inksaver\inksaver.exe hide


The file InkSaver.exe has been discovered within the following program.

InkSaver  by MEDIA NAVI, Inc.
www.medianavi.co.jp/isen/support.html
About 3% of users remove it
 
Powered by Should I Remove It?

Scan InkSaver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.