home

NfcCode.exe

NfcCode Application for InfoThink NFC Reader

InfoThink Technology Co., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NfcCode’.
Publisher:
InfoThink Technology CO., LTD.  (signed by InfoThink Technology Co., LTD.)

Product:
NfcCode Application for InfoThink NFC Reader

Description:
NfcCode Application

Version:
1, 7, 6, 0

MD5:
76edbd6ca68b79d9f7e4ab4d5fc4823c

SHA-1:
8a1aaa7d82be473272b4c1ea8e0fb4378caf77b3

SHA-256:
e23318b39573302d8d4f1b788e1cb0c7184097aaad011ab87d37a1ebdd783169

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 12:28:48 AM UTC  (today)

File size:
276.1 KB (282,720 bytes)

Product version:
1, 7, 6, 0

Copyright:
Copyright (c) InfoThink. 2003 - 2015

Original file name:
NfcCode.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\infothink\nfccode\nfccode.exe

Digital Signature
Signed by:
InfoThink Technology Co., LTD.

Authority:
COMODO CA Limited

Valid from:
3/5/2013 8:00:00 AM

Valid to:
3/5/2016 7:59:59 AM

Subject:
CN="InfoThink Technology Co., LTD.", OU=I-TRAVEL, O="InfoThink Technology Co., LTD.", STREET="7F-1., No.510, Sec. 5, Zhongxiao E. Rd., Xinyi District, Taipei City 11083, Taiwan(R.O.C.)", L=Taipei City, S=Taipei, PostalCode=11077, C=TW

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
756DA513E4C4AA0E05AACBB13CFAEB33

File PE Metadata
Compilation timestamp:
12/24/2014 11:55:45 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:El4yulshtaUMz9mGa2G5VOwYaX9W2q5KJFiY/QKUFUm7ZQvvPPsFnE:ElashtaUMz9mGaH5VOlGVtJFiJL97osE

Entry address:
0x1194F

Entry point:
E8, DB, 57, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, 68, 90, 13, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 44, 05, 42, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, B0, 17, 42, 00, 89, 0D, AC, 17, 42, 00, 89, 15, A8, 17...
 
[+]

Entropy:
6.2526

Code size:
102.5 KB (104,960 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NfcCode

Command:
C:\Program Files\infothink\nfccode\nfccode.exe


Scan NfcCode.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.