home

G_NFe.exe

Project1

This is a setup program which is used to install the application. The file has been seen being downloaded from www29.zippyshare.com.
Product:
Project1

Version:
1.00

MD5:
572d20d0b3697cd540124e2a369e8eca

SHA-1:
d7f4203b5ea6c242ab6d5b3a78d9b0d003984cc5

SHA-256:
9db1db970d9c29a850924319cf4bbc719b79ac3145cece8674d0162ab3d2f5d8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 2:05:28 PM UTC  (today)

File size:
496 KB (507,904 bytes)

Product version:
1.00

Original file name:
G_NFe.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
1/17/2016 12:43:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:+avujt4FAvbQ7sKpM3xAHWsKS75d3y77O0OfxMTudI/aOGp:+2QD8MBAHZNdi77O0O9

Entry address:
0x2960

Entry point:
68, 48, 8A, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 9A, 1E, 35, 95, 5D, 1C, CC, 49, A8, AC, EF, B4, E7, 92, 10, D6, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 72, 6F, 6A, 65, 63, 74, 31, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, FF, CC, 31, 00, FD, 0D, F3, A1, 1D, C7, 7D, 31, 40, 9D, 9E, 75, 3C, 2C, F8, A0, 9E, 30, 7C, AF, 44, 6F, B6, 6C, 4D, 8B, FA, 75, 0B, 40, CF, 31, C3, 3A, 4F, AD, 33, 99, 66, CF, 11, B7, 0C, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
484 KB (495,616 bytes)

The file G_NFe.exe has been seen being distributed by the following URL.

http://www29.zippyshare.com/d/3Cqp33fm/.../G_NFe.exe

Scan G_NFe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.