» configurador_fnmt_rcm.exe
Overview
Analysis
File Details
Downloads (1)

configurador_fnmt_rcm.exe

Configurador_FNMT

FNMT-RCM

This is a self-extracting archive and installer. The file has been seen being downloaded from www.sede.fnmt.gob.es.

File name:

Publisher:

FNMT-RCM

Product:

Configurador_FNMT

Description:

Setup Launcher Unicode

Version:

3.4

MD5:

b9dbfe9318ac2310834bda479a58cd23

SHA-1:

9f1128fd0bc4547f05bfa6ef78afcf5cf627e1a2

SHA-256:

95a805347f3e3599ec6d9cb7db35fbf0e417b5d727f33e6fdd77def77fd1d137

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/16/2024 5:22:56 AM UTC (today)

File size:

1.5 MB (1,547,193 bytes)

Product version:

3.4

Original file name:

InstallShield Setup.exe

File type:

Executable application (Win32 EXE)

Language:

Spanish

Common path:

C:\users\{user}\downloads\configurador_fnmt_rcm.exe

File PE Metadata

Compilation timestamp:

5/30/2013 7:06:01 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

24576:RNQ1pZtDtfu67T8a+SHD+45m5ZbHNYG4k2EV2ynovuTGw7QWDEe1P2HA+t8okBk0:RNQ1pZDuOTLHNs/pV2yn7TGoZY8p+tjg

Entry address:

0x6B0CB

Entry point:

E8, 6E, 27, 01, 00, E9, 79, FE, FF, FF, 85, C0, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 0F, B6, 00, 0F, B6, 09, 2B, C1, 74, 0D, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 66, 8B, 06, 66, 3B, 01, 74, 35, 0F, B6, 11, 0F, B6, C0, 2B, C2, 74, 11, 33, D2, 85, C0, 0F, 9F, C2, 8D, 54, 12, FF, 8B, C2, 85, C0, 75, 1C, 0F, B6, 46, 01, 0F, B6, 49, 01, 2B, C1, 74, 10, 33, C9, 85, C0, 0F, 9F, C1, 8D, 4C, 09, FF, 8B, C1, C3, 33, C0, C3, 8B, 06, 3B, 01, 74, 6F, 0F, B6, 11, 0F, B6, C0... 
[+]

Code size:

699 KB (715,776 bytes)

The file configurador_fnmt_rcm.exe has been seen being distributed by the following URL.

https://www.sede.fnmt.gob.es/documents/11614/70993/.../16d9ce40-0bb9-48cb-b876-3400b3516030

Scan configurador_fnmt_rcm.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.