home

danfemon.EXE

DANFE Mon

UNIMAKE SOLUCOES CORPORATIVAS LTDA - EPP

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘DANFEmon’. This is installed with DANFE View.
Publisher:
Unimake Software  (signed by UNIMAKE SOLUCOES CORPORATIVAS LTDA - EPP)

Product:
DANFE Mon

Description:
Monitor do UniDANFE / DANFE View

Version:
1.4.4.525

MD5:
85e96d80b40ff380f5ae882d6788487f

SHA-1:
254a6eec58ea15bfb43e7ef010a3b7742d5a37a4

SHA-256:
dbc98f681ff58fda84dd53bce9343957089a9233fc78fccdf460ab3e73f10a55

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/16/2024 9:56:33 AM UTC  (today)

File size:
4.2 MB (4,361,872 bytes)

Product version:
1.4.4.525

Copyright:
Copyright © Unimake Softwares

Trademarks:
Todos os direitos reservados

Original file name:
danfemon.EXE

File type:
Executable application (Win32 EXE)

Language:
Brazilian Portuguese

Digital Signature
Signed by:
UNIMAKE SOLUCOES CORPORATIVAS LTDA - EPP

Authority:
GlobalSign nv-sa

Valid from:
1/23/2014 1:39:38 PM

Valid to:
1/24/2015 1:39:38 PM

Subject:
CN=UNIMAKE SOLUCOES CORPORATIVAS LTDA - EPP, OU=T.I, O=UNIMAKE SOLUCOES CORPORATIVAS LTDA - EPP, L=PARANAVAI, S=PARANA, C=BR

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121E4AEA5267F75002C315FE337269D6D37

File PE Metadata
Compilation timestamp:
7/7/2014 11:59:28 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
98304:NGkipDLswVlpLq6LQDal5Oo0OaRhwkyvbauf6Z8rRTypf5X/suJS/e1+nnWtHdCR:NULVVLLq6LQDal5Oo0OaRhwkyvbauf6Y

Entry address:
0xA9924

Entry point:
DB, E3, 31, C0, BB, 80, 73, 54, 00, 89, C1, E8, EC, 0C, 03, 00, 09, C0, 74, 14, B8, 98, EB, 48, 00, E8, DA, 16, 03, 00, E8, CD, 71, 07, 00, B8, 00, 00, 00, 00, E8, 1F, 75, F8, FF, 90, 90, 90, 56, B8, 30, 5F, 60, 00, E8, C9, 17, 00, 00, 89, C6, B8, 08, 40, 60, 00, E8, BD, 17, 00, 00, 89, C3, B8, 34, DF, 60, 00, E8, B1, 17, 00, 00, 89, C2, B8, 54, 40, 60, 00, E8, A5, 17, 00, 00, 89, C1, 80, 3E, 00, 74, 0C, 89, D8, BB, 01, 00, 00, 00, E8, DA, 33, F7, FF, 80, 3A, 00, 74, 0C, 89, C8, BB, 01, 00, 00, 00, E8, C9...
 
[+]

Code size:
1.1 MB (1,180,672 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
DANFEmon

Command:
C:\unimake\uninfe\danfemon.exe


The file danfemon.EXE has been discovered within the following program.

DANFE View  by Unimake Softwares
www.danfeview.com.br
About 7% of users remove it
 
Powered by Should I Remove It?

Scan danfemon.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.