home

instspeedfan452.exe

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from download6.fileeagle.com.
MD5:
995485bcc3091e79cf82257e5d65a137

SHA-1:
6830e4418cc2463ab6d65f85c668b5c8462279fa

SHA-256:
e002b9da116e84574406d5818afed29d151d3c3716be7aaf2b390faa84b9bb5f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:17:08 AM UTC  (today)

File size:
3 MB (3,156,328 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\users\{user}\downloads\instspeedfan452.exe

File PE Metadata
Compilation timestamp:
12/5/2009 2:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:nsiQJAZvThIqXqzYTYLWnisP2PF63gxtA:nsiDTBXqcUqQF7y

Entry address:
0x30CB

Entry point:
F7, C6, 85, DF, 82, BC, 84, C0, 85, DF, 51, 56, 3B, ED, 73, 03, F2, 89, DE, 81, FA, 9B, 55, 00, 00, 73, 08, 86, FB, F2, BB, 88, 80, 42, 65, 0F, AF, DD, 0F, AF, F7, 70, 02, 87, F3, F7, C7, 3F, 52, A4, 34, 69, EE, 86, F1, 57, 99, 52, B6, 73, 5F, 87, DE, B7, 07, FF, C2, 70, 0D, 69, D8, 39, 81, 3B, 6A, 69, EB, B0, C5, 39, 50, F3, 33, CF, C7, C5, 51, 8A, B5, B8, 35, B9, 5F, 7B, 26, 85, D1, 88, DD, 0F, BE, FD, 86, D0, 51, 68, 8D, EE, 1E, 00, 88, D6, 69, F1, E8, 37, 83, 12, 0F, BE, D6, E8, 00, 00, 00, 00, F3, 8B...
 
[+]

Entropy:
7.9986  (probably packed)

Code size:
22.5 KB (23,040 bytes)

The file instspeedfan452.exe has been seen being distributed by the following URL.

http://download6.fileeagle.com/files/2016/.../instspeedfan452.exe

Scan instspeedfan452.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.