home

expressinvoicesetup_v4.32.exe

ExpressInvoice

NCH Software

This is a setup program which is used to install the application. This is installed with Express Invoice Invoicing Software. The file has been seen being downloaded from www.sharewarejunction.com and multiple other hosts.
Publisher:
NCH Software  (signed and verified)

Product:
ExpressInvoice

Description:
Express Invoice Invoicing Software

Version:
4.32

MD5:
f9394fdf854dde0deb852e53783ccf8d

SHA-1:
7a133b7c0a9f805a5ecdd1d26132e5aa71f8d472

SHA-256:
2f85b39d44a7a04a0031228753b9b618f4d8e818ced8d7f6bd7720781796af9d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:14:15 AM UTC  (today)

File size:
802.1 KB (821,328 bytes)

Product version:
4.32

Copyright:
NCH Software

Original file name:
ExpressInvoice.exe

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\Program Files\nch software\expressinvoice\expressinvoicesetup_v4.32.exe

Digital Signature
Signed by:
NCH Software

Authority:
Thawte, Inc.

Valid from:
5/19/2013 8:00:00 PM

Valid to:
8/7/2015 7:59:59 PM

Subject:
CN=NCH Software, O=NCH Software, L=Canberra, S=Australian Capital Territory, C=AU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6A560820FA3E9AD8E5411734B1D40AD5

File PE Metadata
Compilation timestamp:
12/17/2014 7:47:27 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
24576:gCzwRRwH3nmVT9th8aMR2ljC0xl/9AVOv38dGe:/M3U2VJn8aAwj5lVuVdGe

Entry address:
0x11D4

Entry point:
55, 8B, EC, 83, E4, F8, 81, EC, F4, 14, 00, 00, 53, 56, 57, E8, 03, FF, FF, FF, 33, DB, 3B, C3, 89, 44, 24, 14, 0F, 85, 3D, 03, 00, 00, 6A, 06, 53, FF, 15, 8C, 20, 40, 00, FF, 15, 2C, 20, 40, 00, 8B, C8, E8, 2E, 03, 00, 00, 85, C0, 74, 10, 68, 7C, 24, 40, 00, 68, 80, 24, 40, 00, FF, 15, 08, 20, 40, 00, 8D, 44, 24, 68, 50, FF, 15, 50, 20, 40, 00, F6, 84, 24, 94, 00, 00, 00, 01, 75, 0A, 66, C7, 84, 24, 98, 00, 00, 00, 01, 00, 8D, 84, 24, E0, 0C, 00, 00, 50, 68, 04, 01, 00, 00, FF, 15, 28, 20, 40, 00, 6A, 63...
 
[+]

Entropy:
7.9926

Developed / compiled with:
Microsoft Visual C++

Code size:
1.5 KB (1,536 bytes)

The file expressinvoicesetup_v4.32.exe has been discovered within the following program.

Express Invoice Invoicing Software  by NCH Software
www.nchsoftware.com/invoice/support.html
About 4% of users remove it
 
Powered by Should I Remove It?

The file expressinvoicesetup_v4.32.exe has been seen being distributed by the following 4 URLs.

http://www.sharewarejunction.com/get/dl/.../

http://files.downloadnow.com/s/software/14/03/16/.../eisetupfree.exe

http://software.thaiware.com/download_url.php?id=10961

http://www.nchsoftware.com/.../eisetupfree.exe

Scan expressinvoicesetup_v4.32.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.