home

InkSaver.exe

InkSaver3

MEDIA NAVI,Inc.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘InkSaver’. This is installed with InkSaver3.
Publisher:
Software Imaging Limited  (signed by MEDIA NAVI,Inc.)

Product:
InkSaver3

Description:
InkSaver Configuration UI

Version:
3.0.200.0001

MD5:
2c125ff2cc8381d8d6569fc8861936ec

SHA-1:
c6dae2a048a2ddb1122bb9f6ed6c066b6d4377fc

SHA-256:
92941e94f11eae0f45cd8ef7ee59b5ac2696d31e930e2687c65bf413f86ff144

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 7:30:31 PM UTC  (today)

File size:
720.4 KB (737,720 bytes)

Product version:
3.0.200.0

Copyright:
Copyright(C) 2009 Software Imaging Limited

Original file name:
InkSaver.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\inksaver\inksaver.exe

Digital Signature
Signed by:
MEDIA NAVI,Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/27/2009 4:50:28 PM

Valid to:
12/27/2009 7:30:43 PM

Subject:
CN="MEDIA NAVI,Inc.", OU="", O="MEDIA NAVI,Inc.", L=Shibuya, S=Tokyo, C=JP

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
1F3C377D3C1AB6280309636544F8DB20

File PE Metadata
Compilation timestamp:
8/20/2009 5:21:50 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x12D00

Entry point:
48, 83, EC, 28, E8, B3, 48, 00, 00, 48, 83, C4, 28, E9, 12, FE, FF, FF, CC, CC, 48, 89, 0D, 3D, 99, 01, 00, C3, 40, 53, 48, 81, EC, E0, 05, 00, 00, 83, 64, 24, 70, 00, 48, 8D, 4C, 24, 74, 33, D2, 41, B8, 94, 00, 00, 00, E8, 34, EF, FF, FF, 4C, 8D, 5C, 24, 70, 48, 8D, 84, 24, 10, 01, 00, 00, 48, 8D, 8C, 24, 10, 01, 00, 00, 4C, 89, 5C, 24, 48, 48, 89, 44, 24, 50, FF, 15, 57, D6, 00, 00, 48, 8B, 9C, 24, 08, 02, 00, 00, 48, 8D, 54, 24, 40, 48, 8B, CB, 45, 33, C0, E8, C9, C3, 00, 00, 48, 85, C0, 74, 3B, 48, 83...
 
[+]

Entropy:
4.8787

Code size:
121.5 KB (124,416 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
InkSaver

Command:
C:\Program Files\inksaver\inksaver.exe hide


The file InkSaver.exe has been discovered within the following program.

InkSaver3  by MEDIA NAVI, Inc.
www.medianavi.co.jp
About 1% of users remove it
 
Powered by Should I Remove It?

Scan InkSaver.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.