home

iNSICPSAdaemon.exe

iNetSec Inspection Center

PFU LIMITED

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘iNSICPSAdaemon’.
Publisher:
PFU LIMITED  (signed and verified)

Product:
iNetSec Inspection Center

Version:
7, 0, 20, 3

MD5:
1f85fcdf415fe9b75321e89f26420856

SHA-1:
8a060b6ec174f6c408ca401b8905c60832ca3178

SHA-256:
131e47c718050c0acb989e84a6f6def4688d477a3e587c6bfc0bcc5de2279d70

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 10:23:19 PM UTC  (today)

File size:
106.1 KB (108,608 bytes)

Product version:
7, 0, 20, 3

Copyright:
Copyright PFU LIMITED 2006-2015

Original file name:
iNSICPSAdaemon.exe

File type:
Executable application (Win32 EXE)

Language:
Japanese (Japan)

Common path:
C:\Windows\System32\insicpsadaemon.exe

Digital Signature
Signed by:
PFU LIMITED

Authority:
Symantec Corporation

Valid from:
1/20/2015 7:00:00 AM

Valid to:
4/6/2016 6:59:59 AM

Subject:
CN=PFU LIMITED, OU=Software Product Division, O=PFU LIMITED, L=Kahoku City, S=Ishikawa, C=JP

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
561B3ECC9D2BC1381ADAB9F53EAD1E8F

File PE Metadata
Compilation timestamp:
7/8/2015 1:03:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:VNkogyUxECafxs/TsazlwEnrpSRuDRV+Wg+WP0X6E/9NIOVFnToIfF1q5DSSf:VNkre2yEDraM/9HVtTBfF1EDSSf

Entry address:
0xFAC2

Entry point:
55, 8B, EC, 6A, FF, 68, F8, 47, 41, 00, 68, A0, FA, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 90, 11, 41, 00, 59, 83, 0D, C8, 7B, 41, 00, FF, 83, 0D, CC, 7B, 41, 00, FF, FF, 15, 8C, 11, 41, 00, 8B, 0D, C0, 7B, 41, 00, 89, 08, FF, 15, 88, 11, 41, 00, 8B, 0D, BC, 7B, 41, 00, 89, 08, A1, 84, 11, 41, 00, 8B, 00, A3, C4, 7B, 41, 00, E8, 1E, 02, 00, 00, 39, 1D, B0, 7A, 41, 00, 75, 0C, 68, 4C, FD, 40, 00, FF, 15, 80, 11...
 
[+]

Entropy:
6.3559

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
64 KB (65,536 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
iNSICPSAdaemon

Command:
C:\Windows\System32\insicpsadaemon.exe


Scan iNSICPSAdaemon.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.