home

kamus_2.04.exe

Kamus 2.04

ebsoft

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
ebsoft

Product:
Kamus 2.04

Description:
Kamus 2.04 installer

Version:
2.04

MD5:
7d9608d46718d0d44d0eed4ebe329e65

SHA-1:
1830c6ce5159177767d2f2b90858dc2119251ab0

SHA-256:
75be7c89d50508ee18b275715674f925a368da2f7650503b1773fcdbf86a576e

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/25/2024 12:54:29 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
TrojWare.Win32.Injector.sbp
20282

ViRobot
Trojan.Win32.A.Gena.2795814[h]
2014.3.20.0

File size:
2.7 MB (2,795,814 bytes)

Copyright:
©2006-2009 by Ebta Setiawan

Trademarks:
ebsoft

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\kamus_2.04\kamus_2.04.exe

File PE Metadata
Compilation timestamp:
12/20/2008 7:40:58 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
49152:ZaWIQS0/a96hw3sgtqzvLMmNzY2FZ/Jo2/NSkYiLQ6vfrz5sF5+z7Ha8dgcEj:Zh9dwr4zDFZ/Jo27Yis6XrqFWLDWbj

Entry address:
0x30C2

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, EA, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A1, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 8F, 28, 00, 00...
 
[+]

Entropy:
7.9976

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file kamus_2.04.exe has been discovered within the following program.

Kamus 2.04  by Ebta Setiawan
ebsoft.web.id
6% remove it
 
Powered by Should I Remove It?

The file kamus_2.04.exe has been seen being distributed by the following 24 URLs.

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_es&type=PROGRAM&Expires=1479361711&Signature=AVaewSY0sA~cKIzTQMNTXxhtHNMrrKwzcvypjhl4NeiOdzTW0gQWi8dpZgbCyAM7TRG3tGQg5zk5GiMFNdHiOgJLQwYyaON1Z7jr1m56K~h6qGG0aCFZNjOSYn~JN4-BtMvVLvIJ8C3ESwAbGD5Vt4kIdcP1TpXt-eIst6Pq4B8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://kamus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAMaJfS1l6tlYfOBVJUP0YEcb fQuue8W35ARaRWg5rwWMeORDO/9Yi FoIk2sPfh9VE2zVsf45PvaBJvVlvd9hfZvqV8bQaWP IcBjt8dk86HMMIj3uzOLxjFU8ck8RztOQB7XQ2srgIGd0MeNGRTIDMltr mHddlCH9xSAljhoaxxi57vz0xpEY5fXU/.../rehEPHVQXvbEHGEVd7XsG5AJoEpOHQY60qA==

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_es&type=PROGRAM&Expires=1424873278&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=EulWoy0O2bFaM4~LaLVPa23ePTqHH8xU2a7SvdYpfbOAG3KvXj08tBjEGFbLWSXF9UAj~vosFx4~8ZcsvlqTH7KfOmMnkONiGqJiAMo7BSLG-DmhDmUTLVCu41QKHNoUhhiN18b3iFT0A9gRRdDqeMFSSMPerZLUuXjYagX1S0g_&filename=Kamus_2.04.exe

http://kamus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOGK0KH LEVvXO4LQdXrANol/EbGLuYZsHA6jc1xbmbif2Um JCnfUkT55TQrKaxNPBwSavHcFLB2yF38Jqyl2ywWsqV6ggzzJYGpKH slE B3IcMoyo6FjZm0GrdnH4mDV8WnLM4o pOHAoXgVWYXXbRSqwuHCeIGU2 SNjzpt1v/FsTyDFbSnenQOFM8LW1hwLK5zkwfRA4tZaASj tswqZvwaQsTIiEtl uGKc8wimUa76DotQl67 nVEUuy4SIAblfYikG/6lqW7oIWVP8NmeTeA2Vz/a0mv49t0k7KFv WQhxcxIecEwK2g9HbRkkZC7mjkU31MY85tjJ0z0U9qaA J5gFlGCkI7xgO7BDCQGjx0PXPCImWK466CwM7OrT8HVn5MjaBsYYU4Op5F2dp0Tuwyx6WbMe 0OH5oU9kGrkwO3jVBS0uUH6S85p4GpU/.../8RYAHtGvSlgYNpDZoIB3MT9hy3QN585tZgi1sBWUC2gTxeX8oMlsgGvSGA6UZzyXujk8Z2MI10oUWgSrn6RkL2qDLkTg0XhNhImPqFyNhriMaevqjtwEv38dc

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1472308711&Signature=g-EqCalix6tLe7Gm8uouNP7T9iVsKykQFcl9GQhiXC6PTAHvCIlX3LVzywl8tX63VtL68pRJ354R1AmLTsp2yru2mdZ9MD0utc9VdmVkjvMumpsm6ndYoBgI74xxKXeTFUGocELYJcwoiH1KN1nLIpJezVBAdPpSBX1qX1OhffA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1455127205&Signature=EX6VZLk-F0bkCcbM2bT8fE6fw~ReiJB8VSuWnydJ57yqWkDGAXw06QejdDkalGFiUepsv8KKJ6~N-hsBt4eMKr5WOVHeYBc6BglW7rK9hqMNR-XyXcEeCD~Xmiaog~G~TTTvACvge~BS3-QIcltt84nLneLiYQP5hocgZMvhmzA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

https://docs.google.com/uc?authuser=0&id=0B13hHBwwT70vWllfTzl6Sl9MUUk&export=download

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1466903126&Signature=YDD7gxwOHUXEGddWUb2ykuO~uA3iKVm1T53gBlYNTLcFGU1HS0H-KctToW3ll4Nhm4V9rRGcAnQ0-4LpATxihW97ttyIM8SpWu2vqkHUjCsVsECWSF-Ivrd4w-vrhHQQciOKpUCmPtzbuoIJKJEXh6to5f3TBoiQbOi5mx4plGw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1457972914&Signature=SPDXufjLxUObpCZ8MHCB0TDL33Po5YZUIh15kuegvOpKDGDJd~RGZP7unTHLjCYchnTna7oZF9A3F2aWzM~YgAW7yH5VVV5hbO-ajSgnJq2jJzpGlus0p2R6l1USIENwDO-hlMSd3bbWx73ssOy-8RGvedeJEtQPpZTVFqlxhxs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://f51.softwaretop.net/2107tmp/cf/soft/2013/10/ba/.../kamus_204.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1465494570&Signature=LwF8CKEokUZe2OBVqh99PkZye3cuZ8buhLLUvhybBkYh0nlYzfGfxjuovIkxizfnVt9CPQiT8vEMFKXoN0F6YzJfiJ7Y73eucxIuzIquUibJKOXkOiKmefOPp4TGyL9krKK1XZT3jGKo~V5Bicj1fJ-8VaLTntJSgfiLgMOGQSk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1458992862&Signature=DDW17QNBrC5viKQh43sTEyvul3cLRf6KvkSEon8EICIxMxYlImd0b6FM8KbEsKbps95sBIfBx7x9z9Cyl30ukFXgjNksbANFuwgC11IhVJcazVccQSQhtSGltvYmrl4mMXJEiHBa~1kXYhTww4pnWPKMO5c3k89ZYUgAda0NNcA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1458682599&Signature=Mo-oFulTwkKYZUIcjfzfghwgO-Q37xclxrmDPzGoAUjywyqi3oyyeA7pWBgs2LOwmD3xeutSBkvpH6Ug0~T7yxXnIV8ubxKoZ4cebKArTaY~ZKbO4GVo6geVRHkPDGCo8OWGeXtIfQ3VdFVVRP~Pdbet3kDTey70~Bi1O3WMKtA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1454625618&Signature=GqcK9zK8lWOOKMD8NMJHvwucVG1hB4SPstMx8rFsxXk6W27sAjW39p1wYBGdkh0qck8TJRsuOBKC9kO~4jMyBFwNJCeeG31mTJ-AVbcLxF1Bxyf20nUfvnbAD2mJLmsZZctjmQ-HgKufXYZ5MmIWv1eOGGrxNznYm-xIdnSUpiQ_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_es&type=PROGRAM&Expires=1463391817&Signature=D6vyQRRd1daPoyLebfwUVSyyAqU-LZOdY8m09H0CZ33DCvclKqO5EoeQEU7i0lH97DhRjec28st8syQSVtGHK2O5WvK4i9yIZpd0Bnl5QSEL56PUE~D3YudMNKUonXLYrWbHMx2MO46KEFnHvQe01xyfHFyr1gdkXzzo2YjoBtA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

https://docs.google.com/uc?id=0B13hHBwwT70vWllfTzl6Sl9MUUk&export=download

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1448578306&Signature=ejh4-ZXF1UHCCROotNkez0F7AV2GDAO0gE3fRPpm7AXMgFxc1dM74cPXlmVut8yGhVr1bh4YcdqsVHJSo979GbLAZJuip5RPzpISpYz27FvhrS2aG0hls4eIjewmPfmCm1dzIFQaCMm8DcTjZIbtWncCPl1FZ2~wOkPydowdHZg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://download1128.mediafire.com/t1sw894ca9fg/.../Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1455972338&Signature=gYuCoJexaefKG05-Cpu-TSScH0O9gDIjr0vVGv1zDM1fmRoJT-faFABwuc8ShQf5Ec8ERMZv3bN-eIwol~i-V5cu-cLPWrDmHz8oAmLxFmq8EetXh2yYPb1xYPyD0ITUBYUC4lDStUdAy6Wkpc6kWhulVwdkQiaDisk1bTCil1M_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1445147146&Signature=a1MFRyKvZwz0tReVkCqyDAA8XFDj6YYU8KiTEJKziL6HlTeHwg4SWqcel4mledUfWcI4hlsDPykRHeARjZzmZ7MScpeVG4S5Mis2IOFGIHsp04wRLF0sxGgb4dHQMTENJloxTF2AVzZV7CEhxLKT-md~a3z0NVEaUNbHa2or9nA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://kamus.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxAOGK0KH LEVvXO4LQdXrANol/EbGLuYZsHA6jc1xbmbif2Um JCnfUkT55TQrKaxNPBwSavHcFLB2yF38Jqyl2ywWsqV6ggzzJYGpKH slE B3IcMoyo6FjZm0GrdnH4mDV8WnLM4o pOHAoXgVWYXXbRSqwuHCeIGU2 SNjzpt1v/FsTyDFbSnenQOFM8LW1hwLK5zkwfRA4tZaASj tswqZvwaQsTIiEtl uGKc8wimUa76DotQl67 nVEUuy4RCaiDgM3SWK7at9HMyjb/jHvRgdyNHAJVl2WR1EnCEgCT5ASCZBUy61TVp5JgFPJMBRXwzsSTWd2Btmn2onEh3WXoG93Cv2ZtoP0amb6VmFk6CSYCXxNJorJe0XmiRIszr5PGGKMzkQ/OQWsm06NK2dH/XrdDrdLPP7A4JluDhOGzUs4yu9Nn11K3nT Hfa29VmOzJFG03j4zxND 1bgCDrGqdj0szdWyIlltYPFPGZmNLzvVeGPv 29neZb3JTA mdk5S4HzcCoGN19KQLQrnKig/.../Ra04Yyrn6RkL2qDLkTg0XhNhImPqFyNhriMaevqjtwEv38dc

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1443573061&Signature=XSOrg6g~BXyhss10Xm7agQoKzf3IuOpbmL-XwWG-Tga1xfL2yYJzPJJL2iPdWv2QnVa6UmSkb3w1dP3osIi5h7fdXaO39VObncqPNvIumaHUAM64nfwwPIJyR32ZopOQPXSt4XklYL--woW571~Fw4qbJfpskcoe1yhFyTEx938_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1440284008&Signature=VOcKLM6agXNt4cGwvYOrieFpvKspN3a3134RvGfORu8t3yveEQYuSNm8cKDa7bFRul-I4u-BclUXXpgg3bjNDXGqdzWYbi5tim9bgg5fl5L46Fa1f5HBpu1XjVW0X6p2cDtFgzTtA4p7sPZ0-xtTEYpC8gW9CalAhvLhs6lCHDs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamus_2.04.exe

http://gsf-cf.softonic.com/183/0c6/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3342358&instance=softonic_en&type=PROGRAM&Expires=1427247098&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ORb9JcOoUz7d7PGMTQV4ciSwSheb8oncry6unLB1fhAY4HllySVuSxaehnWx674PM0hkCUZbr8pSOK0Yep6h75k6i8ckVBZhZR1CnVQjk-VMnFd9O4f7A4ZqcqVWllgqZZeWTEXY-JxBGTk7z506qVCZBtRc6LXvKxPbEKIRRYY_&filename=Kamus_2.04.exe

Scan kamus_2.04.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.