» nota-fiscal-avulsa10122015.exe
Overview
Analysis
File Details
Downloads (1)

nota-fiscal-avulsa10122015.exe

The Xceed Zip Compression Library

Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com

This is a setup program which is used to install the application. The file has been seen being downloaded from projam.com.br.

File name:

Publisher:

Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com

Product:

The Xceed Zip Compression Library

Description:

32-bit Self-extractor module

Version:

1, 3, 1, 4

MD5:

f58a1a2229fadf6e737c5352ed833e20

SHA-1:

3a53b2f5a97fcf1e68b611174ad2bbad48443a36

SHA-256:

c0a59a5b9fd6e3ef9f216af47d14a3a53380fdf45d065f02d101dc68ca310690

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 3:44:16 PM UTC (today)

File size:

624.8 KB (639,792 bytes)

Product version:

1, 3, 1, 4

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\nota-fiscal-avulsa10122015.exe

File PE Metadata

Compilation timestamp:

1/5/2001 8:24:19 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

3.0

CTPH (ssdeep):

12288:prcMurMaVBGezWxE+OFEEoMToWsIegMsSy2oknKQcFBwu7PMgq0Z0AOC6yggpDpD:NUQ2BGezWxEfFj1sZaSDHKtFBL7P9qEt

Entry address:

0x10000

Entry point:

64, A1, 00, 00, 00, 00, 55, 8B, EC, 6A, FF, 68, 60, 40, 41, 00, 68, 34, 1D, 41, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 60, 53, 56, 57, 89, 65, E8, FF, 15, 78, 24, 43, 00, A3, 3C, 5F, 41, 00, 33, C0, A0, 3D, 5F, 41, 00, A3, 48, 5F, 41, 00, A1, 3C, 5F, 41, 00, C1, 2D, 3C, 5F, 41, 00, 10, 25, FF, 00, 00, 00, A3, 44, 5F, 41, 00, C1, E0, 08, 03, 05, 48, 5F, 41, 00, A3, 40, 5F, 41, 00, E8, CA, 01, 00, 00, C7, 45, FC, 00, 00, 00, 00, E8, 1E, 12, 00, 00, E8, 49, 09, 00, 00, FF, 15, 1C, 25, 43, 00, A3, 64, 0A... 
[+]

Developed / compiled with:

Microsoft Visual C++ v4.2

Code size:

73.5 KB (75,264 bytes)

The file nota-fiscal-avulsa10122015.exe has been seen being distributed by the following URL.

http://projam.com.br/wp-content/.../Nota-Fiscal-Avulsa10122015.exe

Scan nota-fiscal-avulsa10122015.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.