Gridinsoft Logo
File Icon

The nfcPro_x64.exe (nfcCopy) File Analysis

Updated 1 second ago
Checked by Malaware Check
nfcPro_x64.exe

Technical Analysis

File Name nfcPro_x64.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-08 17:00:21 UTC
βœ“

Clean File

No threats detected by our scanner

0%
Detection Rate
2,352,128
File Size (bytes)
2025-06-08
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
818bca3a35d90aa27bf06b7baa7cd4f5
SHA1
ef7e5d89c2a725e3fdab6824f7a118410029e57b
SHA256
24cb7571e5654e42d1ed2da73295f6bc2473e0dc6b5c36c3a5cccfb5f9a9fef1
SHA512
95ed5943586c1f5366913880d693cdb624eb2be3c0260447c8634ba335e308541f7610a211f92c556f9f81a2207ab3ee2e6c987704c8af3cd88f15870c67bfa3
ImpHash
05fedeab776ff83c51b4c823e25f5bbe

PE Analysis

Basic Information

β–Ό
Icon
Hash: 5ece8cb0fff0544e178e1c1d0df8c012
Fuzzy: 51986d89d696bbc134da8d25de6194dd
dHash: 02713028abf17085
Image Base 0x140000000
Entry Point 0x1400821c8
Compilation Time 2025-03-11 12:25:25
Checksum 0x00000000 (Actual: 0x0024349c)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
PDB Path Z:\NFC\nfcCopy\x64\Release\nfcCopy.pdb
Digital Signature No valid SignedData structure was found.
Imports 19 libraries
Exports 18 functions
Resources 205 Resources
Sections 10 Sections

Version Information

β–Ό
CompanyName TODO: <公司名>
FileDescription nfcCopy
FileVersion 1.0.0.1
InternalName nfcCopy.exe
LegalCopyright TODO: (C) <公司名>。 δΏη•™ζ‰€ζœ‰ζƒεˆ©γ€‚
OriginalFilename nfcCopy.exe
ProductName TODO: <产品名>
ProductVersion 1.0.0.1
Translation 0x0804 0x04b0

PE Sections

β–Ό
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 533,878 bytes 534,016 bytes 6.35 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ C0A15E4FCD7F0A25D38344BBA37D7347
.rdata 0x00084000 170,532 bytes 171,008 bytes 4.94 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6B79C774F8D2D9C5F304C88E9FC45EBD
.data 0x000ae000 140,965,952 bytes 871,424 bytes 7.91 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7C1A394302C51A90ECD0542B88390081
.pdata 0x0871e000 12,984 bytes 13,312 bytes 5.68 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3E2262C342A04E470BDFA9BE4D513400
.00cfg 0x08722000 40 bytes 512 bytes 0.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FBFFCAE1ECF5900C2A353F232D5A1ECE
.gehcont 0x08723000 8 bytes 512 bytes 0.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 03E30E067E8B2CC06D53FBE67809A11D
.tls 0x08724000 9 bytes 512 bytes 0.02 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 1F354D76203061BFDD5A53DAE48D5435
.voltbl 0x08725000 14 bytes 512 bytes 0.28 (Normal) 0x00000000 C7DE6813FB9E70A751036E5E27CFEEEE
.rsrc 0x08726000 754,312 bytes 754,688 bytes 4.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ EE550AEF60873FFF2718EF732B212CEE
.reloc 0x087df000 4,212 bytes 4,608 bytes 5.26 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 44878F0D5DBBAF824A1C3E770C8FBC49
Entropy Analysis Alert

1 section(s) with high entropy (β‰₯7.5) detected - possible packing/encryption

Resource Analysis

β–Ό
Total Resources: 205 (746,562 bytes)
Resource Type Count Total Size Percentage
AFX_DIALOG_LAYOUT 18 84 bytes
0%
RT_BITMAP 4 490,194 bytes
65.7%
RT_ICON 21 147,577 bytes
19.8%
RT_DIALOG 18 24,072 bytes
3.2%
RT_STRING 139 83,116 bytes
11.1%
RT_GROUP_ICON 3 312 bytes
0%
RT_VERSION 1 700 bytes
0.1%
RT_MANIFEST 1 507 bytes
0.1%

Certificate Chain Analysis

β–Ό
Certificate Information
Product TODO: <产品名>
Description nfcCopy
File Version 1.0.0.1
Original Name nfcCopy.exe
Internal Name nfcCopy.exe
Copyright TODO: (C) <公司名>。 δΏη•™ζ‰€ζœ‰ζƒεˆ©γ€‚

βœ“ This file has been digitally signed and the certificate chain has been verified

  • The signature ensures file integrity and authenticity from the publisher
  • Timestamping proves when the signature was applied
Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware