home

fmaudit.installer_733_1241824969.exe

ECi FMAudit Installer

This is a self-extracting archive and installer. The file has been seen being downloaded from caltronics.fmwebaudit.com.
Product:
ECi FMAudit Installer

Version:
4.1.0.60105

MD5:
6ae4202054a0ffec27fb8df443984f79

SHA-1:
a777a75f7f3a3ecea63445da211af39440bf6798

SHA-256:
58605120e0cb695086aceb0dd8fea0affc8c54539b0e6c36c11dbc3b56dd2c4f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 6:49:03 PM UTC  (today)

File size:
8.4 MB (8,841,524 bytes)

Product version:
4.1.0.60105

Copyright:
ECi FMAudit

Original file name:
launcher-2016Apr15-164812-21bc90ac-6e90-46b4-b1eb-228318679688.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\fmaudit.installer_733_1241824969.exe

File PE Metadata
Compilation timestamp:
4/15/2016 2:48:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
196608:/4vCqb15uLTu/1vRM3rOERn8e/pOtSSueBXYvR6qWHs2m28:/op5u+/VRMpRn8eBS9BXdH8

Entry address:
0x92F1E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9755

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
580 KB (593,920 bytes)

The file fmaudit.installer_733_1241824969.exe has been seen being distributed by the following URL.

http://caltronics.fmwebaudit.com/.../OnsiteDownloadPackage?fileName=E:\wwwroot\caltronics.fmwebaudit.com\OnsiteInstaller\FMAudit.Installer_733_1241824969.exe&SignalrConnectionId=918fcdc4-1093-4fcf-b7b5-785c120445cb

Scan fmaudit.installer_733_1241824969.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.