home

installspeedfan442.exe

Sokno S.R.L.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from fs146.www.ex.ua and multiple other hosts.
Publisher:
Sokno S.R.L.  (signed and verified)

MD5:
6890fba81571a6e7db5bcd568c989f09

SHA-1:
de2da8514e9955221a1173fc67638dfe255e1dca

SHA-256:
9b3c556c7ab0822f2f2d43dbf7ec9c09e6bd61c81c3622469fabc143cc625762

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 2:34:32 AM UTC  (today)

File size:
1.9 MB (1,975,752 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\installspeedfan442.exe

Digital Signature
Signed by:
Sokno S.R.L.

Authority:
VeriSign, Inc.

Valid from:
2/6/2010 2:00:00 AM

Valid to:
2/12/2011 1:59:59 AM

Subject:
CN=Sokno S.R.L., OU=Software Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Sokno S.R.L., L=Ancona, S=Marche, C=IT

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
202ED4A0A58D3214998C9A2BED089580

File PE Metadata
Compilation timestamp:
12/6/2009 12:50:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:O++fjBg8rOW2CyuXvnU01kme8UWKxIwd6li/Z5jNY/VfUibPF63gO8FWvt:T+fbXvnU0OmExta0+dfUibPF63gxW

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file installspeedfan442.exe has been discovered within the following program.

SpeedFan (remove only)  by Almico Software
SpeedFan is software that can read temperatures, voltages and fan speeds of computer components. It can change computer fan speeds depending on the temperature of various components. The program can display system variables as a chart and as an indicator in the system tray.
6% remove it
 
Powered by Should I Remove It?

The file installspeedfan442.exe has been seen being distributed by the following 3 URLs.

http://fs146.www.ex.ua/get/8f957008e76a43269a36684b3832a479/.../installspeedfan442.exe

http://www.filehippo.com/download/file/.../

http://dl1.filehorse.com:88/win/benchmarking/.../SpeedFan-4.42.exe

Scan installspeedfan442.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.