» nota-fiscal-avulsa1108.exe
Overview
Analysis
File Details
Downloads (1)

nota-fiscal-avulsa1108.exe

The Xceed Zip Compression Library

Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com

This is a setup program which is used to install the application. The file has been seen being downloaded from projam.com.br.

File name:

Publisher:

Xceed Software Inc. 1-450-442-2626 info@xceedsoft.com www.xceedsoft.com

Product:

The Xceed Zip Compression Library

Description:

32-bit Self-extractor module

Version:

1, 3, 1, 4

MD5:

19ab95b9d90f2d5283e6aff846748ef8

SHA-1:

45a5f9582ce9b72374deba3004b0aeb2ecedb40c

SHA-256:

8edee7e05e3a5c9a592aba7106aa11aed0b1b8c72aca66c556d55493486d16b2

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 3:48:10 PM UTC (today)

File size:

624.4 KB (639,343 bytes)

Product version:

1, 3, 1, 4

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\nota-fiscal-avulsa1108.exe

File PE Metadata

Compilation timestamp:

1/5/2001 8:24:19 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

3.0

CTPH (ssdeep):

12288:prcMurMaVBG/aIH2irk0adpPt3x8S96bAXLsbSpfXyrpeHashCMqG4l2iT2frG3l:NUQ2BG/aMlR8Pth8S6YLsbSkVeThC5eK

Entry address:

0x10000

Entry point:

64, A1, 00, 00, 00, 00, 55, 8B, EC, 6A, FF, 68, 60, 40, 41, 00, 68, 34, 1D, 41, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 60, 53, 56, 57, 89, 65, E8, FF, 15, 78, 24, 43, 00, A3, 3C, 5F, 41, 00, 33, C0, A0, 3D, 5F, 41, 00, A3, 48, 5F, 41, 00, A1, 3C, 5F, 41, 00, C1, 2D, 3C, 5F, 41, 00, 10, 25, FF, 00, 00, 00, A3, 44, 5F, 41, 00, C1, E0, 08, 03, 05, 48, 5F, 41, 00, A3, 40, 5F, 41, 00, E8, CA, 01, 00, 00, C7, 45, FC, 00, 00, 00, 00, E8, 1E, 12, 00, 00, E8, 49, 09, 00, 00, FF, 15, 1C, 25, 43, 00, A3, 64, 0A... 
[+]

Developed / compiled with:

Microsoft Visual C++ v4.2

Code size:

73.5 KB (75,264 bytes)

The file nota-fiscal-avulsa1108.exe has been seen being distributed by the following URL.

http://projam.com.br/wp-content/.../Nota-Fiscal-Avulsa1108.exe

Scan nota-fiscal-avulsa1108.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.