home

NfcCode.exe

NfcCode Application for InfoThink NFC Reader

InfoThink Technology Co., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NfcCode’.
Publisher:
InfoThink Technology CO., LTD.  (signed by InfoThink Technology Co., LTD.)

Product:
NfcCode Application for InfoThink NFC Reader

Description:
NfcCode Application

Version:
1, 7, 4, 0

MD5:
969240118548928785d99cd78d834717

SHA-1:
16c7ae31e06abb76479799a52af752a24f1ec2cc

SHA-256:
dfdd9927644a1caf9495d1cf5baa702bd06ef42cb315a2b3706f8b952af204e1

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 6:59:30 PM UTC  (today)

File size:
275.6 KB (282,208 bytes)

Product version:
1, 7, 4, 0

Copyright:
Copyright (c) InfoThink. 2003 - 2013

Original file name:
NfcCode.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\infothink\nfccode\nfccode.exe

Digital Signature
Signed by:
InfoThink Technology Co., LTD.

Authority:
COMODO CA Limited

Valid from:
3/5/2013 8:00:00 AM

Valid to:
3/5/2016 7:59:59 AM

Subject:
CN="InfoThink Technology Co., LTD.", OU=I-TRAVEL, O="InfoThink Technology Co., LTD.", STREET="7F-1., No.510, Sec. 5, Zhongxiao E. Rd., Xinyi District, Taipei City 11083, Taiwan(R.O.C.)", L=Taipei City, S=Taipei, PostalCode=11077, C=TW

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
756DA513E4C4AA0E05AACBB13CFAEB33

File PE Metadata
Compilation timestamp:
11/11/2013 5:56:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:10BtQuXwOMQBmGAdSqWXq9ht+RiJL97os:104uXwKBmGvqiLE9

Entry address:
0x118AF

Entry point:
E8, DB, 57, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, 68, F0, 12, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 44, 05, 42, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 88, 17, 42, 00, 89, 0D, 84, 17, 42, 00, 89, 15, 80, 17...
 
[+]

Entropy:
6.2588

Code size:
102 KB (104,448 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NfcCode

Command:
C:\Program Files\infothink\nfccode\nfccode.exe


Scan NfcCode.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.