home

NfcCode.exe

NfcCode Application for InfoThink NFC Reader

InfoThink Technology Co., LTD.

It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘NfcCode’.
Publisher:
InfoThink Technology CO., LTD.  (signed by InfoThink Technology Co., LTD.)

Product:
NfcCode Application for InfoThink NFC Reader

Description:
NfcCode Application

Version:
1, 7, 5, 0

MD5:
a9cc1f20374e904a45981b6e4f8d7739

SHA-1:
dbab9427e17072c40a2e31e62c009e21965c02d2

SHA-256:
6b8410d16cd88cd9887b1adcfc213cd6fdfa4e45f630b07df415bbdfaff6e8f7

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 5:34:47 AM UTC  (today)

File size:
276.1 KB (282,720 bytes)

Product version:
1, 7, 5, 0

Copyright:
Copyright (c) InfoThink. 2003 - 2013

Original file name:
NfcCode.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\infothink\nfccode\nfccode.exe

Digital Signature
Signed by:
InfoThink Technology Co., LTD.

Authority:
COMODO CA Limited

Valid from:
3/5/2013 8:00:00 AM

Valid to:
3/5/2016 7:59:59 AM

Subject:
CN="InfoThink Technology Co., LTD.", OU=I-TRAVEL, O="InfoThink Technology Co., LTD.", STREET="7F-1., No.510, Sec. 5, Zhongxiao E. Rd., Xinyi District, Taipei City 11083, Taiwan(R.O.C.)", L=Taipei City, S=Taipei, PostalCode=11077, C=TW

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
756DA513E4C4AA0E05AACBB13CFAEB33

File PE Metadata
Compilation timestamp:
9/1/2014 2:52:17 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:LC8l2c8RdDIMzdmmLmxy1OYNaCb/W2q5KZFiY/QKUFUm7ZQvvP+bK:LCQ8RdDIMzdmmLcy1OAxbLtZFiJL97of

Entry address:
0x1193F

Entry point:
E8, DB, 57, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, 68, 80, 13, 41, 00, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, 44, 05, 42, 00, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, B0, 17, 42, 00, 89, 0D, AC, 17, 42, 00, 89, 15, A8, 17...
 
[+]

Entropy:
6.2526

Code size:
102.5 KB (104,960 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
NfcCode

Command:
C:\Program Files\infothink\nfccode\nfccode.exe


Scan NfcCode.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.