home

instsf448b4.exe

SOKNO S.R.L.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer.
Publisher:
SOKNO S.R.L.  (signed and verified)

MD5:
f50bda5c710ffb181d931cfb80c9ad83

SHA-1:
ed336c9b76eff7c3130b56030997b1bb0334f97e

SHA-256:
b2f948a1f43974479b0c721da5ea3e933762bdd594eab828759f68443ba861e5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 2:46:05 PM UTC  (today)

File size:
2 MB (2,143,824 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\instsf448b4.exe

Digital Signature
Signed by:
SOKNO S.R.L.

Authority:
GlobalSign nv-sa

Valid from:
1/23/2012 3:31:42 AM

Valid to:
1/23/2013 3:31:42 AM

Subject:
CN=SOKNO S.R.L., OU=Software development, O=SOKNO S.R.L., L=Ancona, S=AN, C=IT

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112195D7AA105E2FFC7B0E33F36DA1636E74

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:3IIekEVO6IWeVOgKuy0zu+Wy9ntPF63gO8F2BA3:5PEMnWaOL9+r9tPF63gx2W3

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9972

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file instsf448b4.exe has been discovered within the following program.

SpeedFan (remove only)  by Almico Software
SpeedFan is software that can read temperatures, voltages and fan speeds of computer components. It can change computer fan speeds depending on the temperature of various components. The program can display system variables as a chart and as an indicator in the system tray.
6% remove it
 
Powered by Should I Remove It?

Scan instsf448b4.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.