home

NfcCode.exe

NfcCode Application for InfoThink NFC Reader

InfoThink Technology Co., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NfcCode’.
Publisher:
InfoThink Technology CO., LTD.  (signed by InfoThink Technology Co., LTD.)

Product:
NfcCode Application for InfoThink NFC Reader

Description:
NfcCode Application

Version:
1, 7, 3, 0

MD5:
a0e495d12e44efecfeea441023c7bb5b

SHA-1:
c1746536b473c1ccc29bb587bc0d81c73b70b845

SHA-256:
18cf156a1a330cf5dec5028c1feeab8b60426ecd77e313c7609526f957c8fa22

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/6/2024 12:49:02 AM UTC  (today)

File size:
275.6 KB (282,208 bytes)

Product version:
1, 7, 3, 0

Copyright:
Copyright (c) InfoThink. 2003 - 2013

Original file name:
NfcCode.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\infothink\nfccode\nfccode.exe

Digital Signature
Signed by:
InfoThink Technology Co., LTD.

Authority:
COMODO CA Limited

Valid from:
3/5/2013 8:00:00 AM

Valid to:
3/5/2016 7:59:59 AM

Subject:
CN="InfoThink Technology Co., LTD.", OU=I-TRAVEL, O="InfoThink Technology Co., LTD.", STREET="7F-1., No.510, Sec. 5, Zhongxiao E. Rd., Xinyi District, Taipei City 11083, Taiwan(R.O.C.)", L=Taipei City, S=Taipei, PostalCode=11077, C=TW

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
756DA513E4C4AA0E05AACBB13CFAEB33

File PE Metadata
Compilation timestamp:
7/8/2013 3:20:25 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:tGiiecHyvyUetRKhFyhU0nVrCGZ/q5yu9iY/QKUFUm7ZQvvPk93:tGTbHyvyUetRKjuUKVrLVu9iJL97oO

Entry address:
0x117DF

Entry point:
E8, 3B, 58, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, 68, 20, 12, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 44, 05, 42, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 60, 17, 42, 00, 89, 0D, 5C, 17, 42, 00, 89, 15, 58, 17...
 
[+]

Entropy:
6.2546

Code size:
102 KB (104,448 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NfcCode

Command:
C:\Program Files\infothink\nfccode\nfccode.exe


Scan NfcCode.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.