home

NfcCode.exe

NfcCode Application for InfoThink NFC Reader

InfoThink Technology Co., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NfcCode’.
Publisher:
InfoThink Technology CO., LTD.  (signed by InfoThink Technology Co., LTD.)

Product:
NfcCode Application for InfoThink NFC Reader

Description:
NfcCode Application

Version:
1, 7, 3, 0

MD5:
d778421a7edaf4efaf11f40cc2cf536d

SHA-1:
8cb12058af3a291676b3b2bbee756f59f6cb71b1

SHA-256:
066514f0d32758c21dc2462e865dbf8feda5dc5114a5fe513c859c15bea6be57

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/25/2024 3:13:29 PM UTC  (today)

File size:
275.6 KB (282,208 bytes)

Product version:
1, 7, 3, 0

Copyright:
Copyright (c) InfoThink. 2003 - 2013

Original file name:
NfcCode.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\infothink\nfccode\nfccode.exe

Digital Signature
Signed by:
InfoThink Technology Co., LTD.

Authority:
COMODO CA Limited

Valid from:
3/5/2013 8:00:00 AM

Valid to:
3/5/2016 7:59:59 AM

Subject:
CN="InfoThink Technology Co., LTD.", OU=I-TRAVEL, O="InfoThink Technology Co., LTD.", STREET="7F-1., No.510, Sec. 5, Zhongxiao E. Rd., Xinyi District, Taipei City 11083, Taiwan(R.O.C.)", L=Taipei City, S=Taipei, PostalCode=11077, C=TW

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
756DA513E4C4AA0E05AACBB13CFAEB33

File PE Metadata
Compilation timestamp:
8/19/2013 5:08:37 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:5GiiecHyvyUetRKhFyhU0nVreFGZKZq5iu9iY/QKUFUm7ZQvvPk9d:5GTbHyvyUetRKjuUKVrexZ1u9iJL97o4

Entry address:
0x117DF

Entry point:
E8, 3B, 58, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, 68, 20, 12, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 44, 05, 42, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 60, 17, 42, 00, 89, 0D, 5C, 17, 42, 00, 89, 15, 58, 17...
 
[+]

Entropy:
6.2545

Code size:
102 KB (104,448 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NfcCode

Command:
C:\Program Files\infothink\nfccode\nfccode.exe


Scan NfcCode.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.