home

menu.exe

OFISimple

FNMT

This is a setup program which is used to install the application.
Publisher:
Lorenzo Fernández  (signed by FNMT)

Product:
OFISimple

Version:
09.13

MD5:
12e1dbac567d1a33b1a130615536fad7

SHA-1:
47fb7ec23ab71e26f269aecad1d4295ec641c739

SHA-256:
bae996115cf6e82f96eb4dd9a85b7e2b43d750ea90b95315bdb90c8fbdd6bc19

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/28/2024 5:58:14 AM UTC  (today)

File size:
4.4 MB (4,652,560 bytes)

Product version:
04.14

Copyright:
Lorenzo Fernandez Copyright © 2013

Original file name:
menu.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\ie\{random}\menu.exe

Digital Signature
Signed by:
FNMT

Authority:
FNMT

Valid from:
1/23/2015 11:06:34 AM

Valid to:
1/23/2018 11:06:34 AM

Subject:
CN=NOMBRE FERNANDEZ URBANO LORENZO - NIF 31863535W, OU=703000514, OU=fnmt clase 2 ca, O=FNMT, C=es

Issuer:
OU=FNMT Clase 2 CA, O=FNMT, C=ES

Serial number:
3D26916D

File PE Metadata
Compilation timestamp:
2/9/2016 6:19:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.0

CTPH (ssdeep):
49152:kng2O+dMNLs3UHFn8oO4vA6D0DyBcP7keBg/CywOgTuTaXkzdJlMePJpMkHjSANV:k1EsEnvkANLbehvratLfRW6bk+

Entry address:
0x75E4

Entry point:
EB, 10, 66, 62, 3A, 43, 2B, 2B, 48, 4F, 4F, 4B, 90, E9, 68, 4C, 6B, 00, A1, 5B, 4C, 6B, 00, C1, E0, 02, A3, 5F, 4C, 6B, 00, 52, 6A, 00, E8, 85, E3, 11, 00, 8B, D0, E8, 42, CB, 10, 00, 5A, E8, D8, BE, 10, 00, E8, 3B, CB, 10, 00, 6A, 00, E8, 20, 21, 11, 00, 59, 68, 04, 4C, 6B, 00, 6A, 00, E8, 5F, E3, 11, 00, A3, 63, 4C, 6B, 00, 6A, 00, E9, A3, B7, 11, 00, E9, 4E, 21, 11, 00, 33, C0, A0, 4D, 4C, 6B, 00, C3, A1, 63, 4C, 6B, 00, C3, 60, BB, 00, 50, B0, BC, 53, 68, AD, 0B, 00, 00, C3, B9, 9C, 00, 00, 00, 0B, C9...
 
[+]

Code size:
1.1 MB (1,204,224 bytes)

The file menu.exe has been seen being distributed by the following URL.

ftp://ftp.s13b1a6c.alojamientovirtual.com/programas/ofisimple//menu.exe

Scan menu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.