home

LogoMotion.exe

Logo Motion

This is a setup program which is used to install the application. The file has been seen being downloaded from s6608.chomikuj.pl and multiple other hosts.
Product:
Logo Motion

Version:
1.5.0.40

MD5:
be6f97a573824d248eb32c42cb5b6889

SHA-1:
58989b455b9a7e5c6158f9a93d19b58fa7323ced

SHA-256:
f2764e53df4a1dc66699af7ab1d8c432923d00bbf9629b2c233dcbe6d298fdd0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/4/2024 4:58:16 PM UTC  (today)

File size:
2 MB (2,115,584 bytes)

Product version:
1.5.0.0

Original file name:
LogoMotion.exe

File type:
Executable application (Win32 EXE)

Language:
English (Wielka Brytania)

Common path:
C:\Program Files\logomocja\logomotion.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:Eprzz3BUvFvZY956hOoYAn8/Sym7eVF3qg3l+FM0bqhMlehGqL/HMuxmesfDMiSW:EpXGjAoYtTm7mF3N3lb0OsqUe

Entry address:
0x105BE8

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, 33, C0, 89, 45, F0, B8, F0, 58, 50, 00, E8, A8, 1A, F0, FF, 33, C0, 55, 68, 04, 5F, 50, 00, 64, FF, 30, 64, 89, 20, A1, 3C, A7, 50, 00, 8B, 00, E8, 0E, 6A, F3, FF, A1, 3C, A7, 50, 00, 8B, 00, BA, 1C, 5F, 50, 00, E8, 01, 66, F3, FF, A1, 3C, A7, 50, 00, 8B, 00, 83, C0, 40, E8, 0A, E9, EF, FF, 8D, 4D, F0, A1, D8, A2, 50, 00, 8B, 00, BA, 30, 5F, 50, 00, E8, 82, 3F, F0, FF, 8B, 4D, F0, B2, 01, A1, 9C, A5, 41, 00, E8, E7, 49, F1, FF, A3, 94, 0C, 5F, 00, B9, 40, 5F, 50, 00, BA...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1 MB (1,069,056 bytes)

The file LogoMotion.exe has been seen being distributed by the following 2 URLs.

http://s6608.chomikuj.pl/File.aspx?e=9KHWNDbo3x_RZF8ydC9owIfPdq-W99O7fsKWsOn_H60xLzHwGCGEFOKH5pVP6ejrgz6eJTJYRZqxVrqVfNLDlKXKVH78K2OvTzW-YU3TxphuDAaGMVig7An7RRjJQA3fp0oAj6iZT91xwzfyIj90W4D4fXSPQCkyTen9RUjRWJY&pv=2

http://s10116.chomikuj.pl/File.aspx?e=9KHWNDbo3x_RZF8ydC9owB0TEmdijn2NTuEXKKRocXom-AQjA92NDcwfrD9TAh3eGA8RVEgxuStUqn8tBqWGIulAQyBtOsKHXgj_XDGmOcVKyzAiQurgvTKYV6C_aSASqRgmMMuwRUvI3r24Q3pCBQLVaptrXbS9EfO-p2DSoEs&pv=2

Scan LogoMotion.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.