ws109c95a0.dat

FMSLogo

David Costanzo

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from fmslogo.en.softonic.com and multiple other hosts.
Publisher:
David Costanzo

Product:
FMSLogo

Description:
FMSLogo installer

Version:
6.35.0

MD5:
09f5216fd149b34ca01d13e0a1c82135

SHA-1:
5dfcc7b811e89aa3e5604ab3c2001430a3211f56

SHA-256:
1d168b7546f885b4c55cc0717f66542eba67fa03f0da947188509aab4ffc3d00

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:11:04 AM UTC  (today)

File size:
7.3 MB (7,669,268 bytes)

Product version:
6.35.0

Copyright:
Copyright (C) 2016 by David Costanzo

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
2/17/2007 1:48:44 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:q1Z/d2u5ZX62NvDTLu+6dYlDBlLWlOQp3sSdY/s7:iZV22ZK2NvCVdABAcq3sqYs7

Entry address:
0x32CE

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 14, 70, 91, 40, 00, 33, F6, C6, 44, 24, 10, 20, FF, 15, 30, 70, 40, 00, 53, FF, 15, 74, 72, 40, 00, A3, 10, 48, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 20, FD, 41, 00, FF, 15, 5C, 71, 40, 00, 68, 94, 92, 40, 00, 68, 60, 3F, 42, 00, E8, 49, 28, 00, 00, FF, 15, B8, 70, 40, 00, BF, 00, A0, 42, 00, 50, 57, E8, 37, 28, 00, 00, 53, FF, 15, 0C, 71, 40, 00, 80, 3D, 00, A0, 42, 00, 22, A3, 60, 47, 42, 00, 8B, C7, 75, 0A...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file ws109c95a0.dat has been seen being distributed by the following 23 URLs.

https://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowqEsNMRUqcctHogik55J0rZrmzMFYmZJxJJ7nHKJlpJxqJUL3XNRSAaxWFMR/4x1Flom91p0E6JIXvwyXpDfO ezogXWrLysqiyn55bUIozCQ5yhUfQHmhpO4KQ GSNlVNStJ2nu3hbd0 Ny9dmzMjZhq7waZ5hfkuo8xPgdEktjbdedLbylPbchytUyFGzgSbSpS1ucxs5XlHIcrmuKCGcwMYADbQ4CugUTR1uXjICLGr9WPTX/nupILzI3EAAuqlM3vZSJoWpEa/AOSADs/uD5yzlM50N2NeGsdGONsUJlaEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

https://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowq8IEAuT93 Y8VGq4vE6Kb0JWsWLmwWPpuEPGwNautSTPCO85L5qXS8ff8L23NNdzoU5lhTQ2o wnnuUee1mW T1hU9VuJDC77CTqqNuXS1043tU0sj3jjJLdF8FSJvq8jeEB3n2xibA57b992PNBRnNpZJo/t vjXwABBxDxruDVnhrUeY0jQ6z/whRKIxp7z7 ydRATJbd/APO1e8epb71BZa7YdHwGMWQ3X4MducjMI0PMr45U6fOa4cPJQmHvPmp/WXMNwmvxxBGDVMIW5GhhB19 DR4/I4Xg3bQrYeTqEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

https://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowpMbMYN o110HpAxbf18rWu8K0CdOWeCSJDjNwbesPFgjRuEOVkv3p6hlmOtGoWnqjr4Wyog5KSe/StWpgjoz8oe mUbnCrX8Kgdpu Edait/j/8Q2JDUPgrHnCZdRl8HIvPszRsZJHiHrS3J17zhrsfXlFmN61PGxxD1yh33iMvBILz9kbMtkX4LKja1ETqCWgZBZOikaDKlG76Wv2jR65je19blhf4se8jOoErzVZNDGiTraxf0ydzOD1jmaGf7xxa2hVXyN9edXswEpv7X4sLW/geULBeqvGLoEzxanHa6Ee0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

https://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowr gupTvew/byzHW L0vX0eUaJbbMXMJEhuQ9za/NG8rhM0tXQGymzLIMFqLQPypwhT0YWANXbfbR2ETs/hDPBqyREW81JYP8Q3rXvolzKWGVqO6CePZuE61K/rLLt7g/JG/xhcJzb7HwRiC0REanaVt0VyvqQCHZV 4C8yiPAL zvKg4FQ57JYrv396nf0/tVEce8jJp8UZOpgb0iAXWXsaIvutWYAzuyNfOFicpKvnRpxlrgMBcmG9ptk91VSfn037std9GTT5uiNWeCqnPmLqwKUedyI 2MpOMRX6gwiiqEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

https://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowq4vq17yrE237dxMmnAZvxrJ7rNNjypVjgDqCJG2RMT0PYHBNHuQb/TOAubDko7rkAgHWoEZ9O94zo4nXIldctCvFjOOyF7oUgzNkyWtEoFDnrahvFb69pxluR2hkbU0 B7RXwGuGUiy jEjgRabg/Kbx4akPkmLW6vOEczONxOc 5FMePbfjkJUauv9ChZ7mn/BBL7f5zG9pllzilXoAEqp84cdZ/VLCr e3RMVS5qWYlK1 ZQGyxFNO7 XS8L/MmK5YkP1SydsKmjlfULo8EWKbYdimAxgjlNY42KuaR4DqEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

http://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowoMmUDCaanBUKK3t5Q/yICMudY3WEZUbpol8P4oCCUVnpLkqzSd 5LqDaHdDxZm1yuY5O3SWH6G5VCvHic1jNl T/oWttQ7LRybsAfP yfeon2IBz1 Tn nkhfrGuFA nsuJgRqTKaShlBNS5Sudt9RP3FHZwYL5xH7ad8yh gJu/X1AAzKCjO qkrpPGBy gG4VIilbj/LrFDQ72rXAFaS/5qUvIXsoD87jWozDHuOP4JRzM6gnIcBYj1hkLCMbwWd4Ka3thOH5nbbp5GFKqHZoVuV beljmM3erDd5JYgqEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

https://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowojKBOFL61EsjwdCPAEEco88 mzftnJyzLE5PnN/8Djmm0qjVJVhf/R7yaPZQDmBUNCxCq6b5kpfkPAN4k8qJJ/kWfmVKV2rx8gx0ilnyfart1bgrcXMoUi6m96SZzAIR3oqE00Nh7e7s15lmxs2Kuh9lgQxmWqrAx0H4gbV9pYAYSvHFRz5QnAiVDc9/pD6p1rnGxd81MiwrB2v94h/0uM1tF28NnfMNAgXKp6JPsJvC3P2chIG3JmBLY24jFOL5Ap8RF3IhLqkmEEgD5Nn0eG2z/Yvef71DTWDXoIuHO9XaEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

http://freefr.dl.sourceforge.net/project/fmslogo/FMSLogo/.../wxfmslogo-6.35.0.exe

https://tlsc.vic.jdlf.com.au/Services/.../DownloadFile?sessionstate=readonly&id=2804e053-493f-4f43-8053-ec8a5041389e&originalFileName=wxfmslogo-6.35.0.exe&nodeId=89387

http://netcologne.dl.sourceforge.net/project/fmslogo/FMSLogo/.../wxfmslogo-6.35.0.exe

http://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowowjel/f6pfbs5ooz1WPng 7EPAApke4UB/8utYkomHkGRewcrWStcF0ULIp8Xf52nad6S1LVAgdpJwqFBPsqsmVijatzEkYRr9ulIFMfgwkdtXfAJEUAQA7Tq5UA0/LKs K xU41lDuTs0L58GHQnKNZAuSVj7jlOgtAL1Nej/QgyvUqqfHZMbliEGbuh4GSCDl4z6TGN7pvHKorTYJzbAOelpdqWwecNy0pAQNtoF0DXdExhEvmeIn2asveFaYFTqogwGQyYsS6fVdRLEV6CARkqx3qzuoc33fNGxVIe0DaEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

http://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowrjFWqscPdARi0 vxjSNPVpOZ7CIbNE5Wrm/EiJbm3rCZ/RS2oAM4hJe39L5wOnTkACV6S830ArSpu8mISOzJL8T3IzkG8HIUbRfPhSw0b8soyrV6VV2p59ILNgAJh0xQm78U1jBmLrX9aNRDA7SgirNk5ordjVetl84yjtc4qYCO55enudZtFtWeVgYjK9aA5HcnPz8G4uagiNuiDsloBPo2MPMoBlRqu Z4NmkW0jVMOmAXj2lT7tcuwomWnpmvLt5/tqRoxxKcKHKlL CW9lfr CnvKDvpvfdNQl5NDN8KEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

http://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowoH2wdb8fgEBcWU2gBh7viErC8Fv8/u5UnBGg7Z3Ft1u/Vi0XOKO0fn K/tXKWxXbvyq0/nV65AIhLorg7uIEj dYLBmMPdk5BVBI4Tjh/VILxbVeB923ZrDbFPm/Cqrg4RLsGKG4zhDp2GFTXrzUtR8L7IaGE4Gm1sVKYzHki8W2eAbPVBHn41zy1EHwi5eCyH9Dde22BDZiOIcZDPDuRpZ9TXsguP9GLEebC4ljsiq6IN59Vxfar5IP8jD CYtpYRMYQB5afJbc2J5GuKPWkyi2S2bRoVuSqgQSknTmSbPqEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

http://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowplDE4CRe7o5iMQi4mHuA9capdzbAlHSsY2GSi9VragY iVvObitgUwNX2eGZA1fOmll63gTPOHVSYUc9h9qZKReNpbl2WzDPkk2MQSutMrGpfR5/bZKsAVm2iO7d7H58r8WUDfpjsgeHHUKVwyNLD/Vxh4bM5BXQXLNzjkkC63UG bf6Lpwh9SmM/bX29cLSABL8R6bywSMGMXRh7UYBeoxGsy3hzMPXaPP8dRU5kseXfoZaZreEzgCMWFpWqI3HLW3TA89h5y3PD7VERoOCM//UpNKJrPUijIksWCRG48y6Ee0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

http://fmslogo.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAPzTMBdtK886gg6Yq4Iu9ilnhVvll7aJMd0LU0an5ki0N1iiKQKdFP365Qwp/Ecro/AhrAWLsC4d66NJ9U6d9dyfi55i/aJaKsD5Xy5kkNKt4FAArZyG6Cz17jAWNSPb522UbNS1DCXbk5vB1GIZLyUNPMX tlJ2zJ50zlylOdDburLdhD9VGf/kQ1X Lt4xjbGDzxJuZOvw3CmukopIpg3ItgTdqzDtpxjZ5cB6HSjvw6ZzRmQDPZEXkuQvPuWowr5Zxa3wXw87shS kyPYX1xCfkAdqYgg3S8HCGTpp399D/N5YKr4tqFrSHsYLSQ0pp4SpCVaRIrZzHJlASEF8ilP c1hm0UjbUxJs 5fgfJcLU65CiaqQpbB0Aj9LLGUz ggPrOpjML2zo1WJy9k5JjsceUhGF7iOISCgfh4027X ze7W3xuLLmws 5yra RZv/9UtJkvw4mIPBJJ12nLMN74S916eHuNJEwmD15 FqWvC/sxXFlP3hJmgTQ6zuRNAhMggzH6iRtRmyWQYG3VmsE5A jtl78C8kAEXo6ZJlaEe0qPM6UkZwvmghkZb/krIUI28gtssj473vLf7Alt37uKo5PUEnr/.../5ic3hk40wNZ5 k=

Scan ws109c95a0.dat - Powered by Reason Core Security