home

kamerzysta-3_00_159-instalator.exe

Onet.pl SA

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Onet.pl SA  (signed and verified)

MD5:
668b61d15e0eaac53821cc75467c8f4c

SHA-1:
79d7fdbf22a477e596f3097354613c110fd06d1c

SHA-256:
f2be9295ef2038772d151ae95072caeb94986a42bd99927951a1a3e8a46aa194

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/19/2024 3:40:00 PM UTC  (today)

File size:
948.9 KB (971,680 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\kamerzysta-3_00_159-instalator.exe

Digital Signature
Signed by:
Onet.pl SA

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
8/13/2008 2:42:42 AM

Valid to:
8/14/2009 2:07:56 PM

Subject:
CN=Onet.pl SA, OU=Dzial IT, O=Onet.pl SA, L=Krakow, S=Malopolskie, C=PL

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
6E13E283AF4134D584BC7E3A2B5984CD

File PE Metadata
Compilation timestamp:
3/29/2008 11:14:12 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:dv3gDnPpzUnS84bDxufEhjV/tjxbNfcT8ZX48QGQuTGM:J3inOn8bDphjV1jjqMcGzGM

Entry address:
0x30E3

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 58, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, E1, 2A, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 90, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 4C, 91, 40, 00, 68, 60, E3, 42, 00, E8, 98, 27, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 86, 27, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file kamerzysta-3_00_159-instalator.exe has been seen being distributed by the following 15 URLs.

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1464909318&Signature=ZkrxTfzgDP84bIZshAY7jiJ7VEKtjQp0ryTCzr5--y1o-9X47mDc-LVz-RABcuIo4fPh-05-eUxQ-01SaJi7PWPOvncBXh0BDXY1obvstV9v~HRWtfl~ymV8R5ZnwdrsUlcWx~-R7bxKSYQbjRBqkM82bol93kYEyAtPd-OqH1o_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamerzysta-3.00.159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1434691091&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=YaXMvLswsC9N5JOn5qq9JyvBKBwJ1Fv9jBoGJZSvA72pOeQkDrQWdgfMV0qjm5mSZW4azXcG1Rokj-30JWgZiAKsq1Nj-wYUCCL0yJTO5a5C9CdmwcGgrUmoNWFvJdnqmiAnup7adfBXQCA~IfezuJE2UOBN57zPysrl49~XB40_&filename=Kamerzysta-3.00.159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1433012025&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=h30DKU~jwPrnL~SIYIoOmmGwcsoP910QFPs-VBQ572zOU6teho4tXYtywhqRYB6aByqxF-XrGqxg0P62yHyo6RdHVEphJFSqlOx-oce7ddUfcLpA2P8xzmwYlCt-Ag5igK03DCc2xJq5F7J6PzsqYTg4YyyfamtKrhgGQEdsSOY_&filename=Kamerzysta-3.00.159-instalator.exe

http://softonet.pl/wyslij12578-2.html

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1476087742&Signature=QlRblac7AiMpNQGUT1rLTvfmJ75U6zjW6ulJrtBB7x9YqwPbt47mi6lkVA6vdVrJlGExikfUlR9TuKjjsWYMed4s7GZdWBwiWM3uUdIRdPJbghPh2NdzR3B~FXV28JBcZhXBf55XiDLqWpLIhS1v3NuAbo7BSkiai0st1nnrGIk_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamerzysta-3.00.159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1427972722&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ftbRfhgrcTzBqBGARRKsaYGsuPr5fs7WNaZCCpRvuJ8r1eOYiDDm~XQiJ7ysmy49kT0XGgQCyY9-32FgtylQmpHmLDameNXDcIZ9tbL-7TG0XBwrABCY2M0j96tvzHmilbJibCAGUY8oZaVOP4au3hh7yRDftQuKP77syKXTPN0_&filename=Kamerzysta-3.00.159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1463566580&Signature=PJCjpBDE8uYw~2T-cf17U6Cy~Wi6ArgdjRmpkR0EiL~DwoCpkuNHVUfQnl87ditWFLB-VVU3uKcYJ70WaLDdU2nc5BwLP1F7MrNoTJ7Ey6f5gtOG~Tq6Da6oudB-3~SNWNn2I4f867duKkITwXSNmGmWa4jrriyWkz8-NbQtzCo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamerzysta-3.00.159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1465048410&Signature=d31leEDg3gvxLsACOpmAbOAw1QlwiGLB9nkCVStSFJKKphVhwlaG8~dtXBXJVMJp9Gtw0eNzma8Kb3Pp5cEcMzwgblc9RUdpTOFlYej0lcVjfzNMsUCQMzN6TxS2MvCrYlZeE075DLSqbTHqT2i7cw7oA9O3TkKUAqF~s4N64tc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamerzysta-3.00.159-instalator.exe

http://global-shared-files-lw.softonic.com/79d/7fd/.../Kamerzysta-3.00.159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1455455978&Signature=KlH-zkP6805a78~HZpdOUeGedXBbVdI6VOHfC3dGR3OcqPcbQENNOWWXUXx~v5q~dtcTDrnhxU-Ri4UVuiCCqWzunKVTv-wJj8al~b1C305ugdydB2xO-XGrGodCE~0EoMT0fbOUW2VlOd4rS5S4XW-NADq~xz3E3AyenAEYqJw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamerzysta-3.00.159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1459933804&Signature=c7lt52hB-H8SWsTz~TkEgmTHu8ekmgVsf7iPJ~sx2vrr3yzr1djSMMTQMwDZqdUAv8lncKEgXZBxq7jLjU-pw9bwEpSGy4DNzWMPBL7orBUfLibl2-kJuK1zT5eSq8mBFsiDQ3ONgLSUtefuKdgcVaxfEV3yC0Z9bxMEQJW7pzc_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamerzysta-3.00.159-instalator.exe

http://pliki.republika.pl/.../Kamerzysta-3.00.159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1452836765&Signature=Y8Y2HrCNiLt8Y0o-xpgfim-lycQtyRSxBrTi3dcGwAhm4XO3WDIoD7pW6LaS325Xsvo3oqGTpZxRVVK8b-cjEf6pxrfTuoIVtSmixp6s~KO~1SsMp6nwf4CQt9lW7V3a51g8OT3Ba4nK57xyDSPwmSEAtFAwBJGuIwjk3NzKODw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamerzysta-3.00.159-instalator.exe

http://sfs.mm.onet.pl/get/files/1/pclab/pliki/.../kamerzysta-3_00_159-instalator.exe

http://gsf-cf.softonic.com/79d/7fd/.../file?SD_used=0&channel=WEB&fdh=no&id_file=112940&instance=softonic_pl&type=PROGRAM&Expires=1450646260&Signature=elqn~csxaixwaVkTExbSYDbuQ9GpVpohzJje-cLyNO5zGmVZJ~r120NmpIx-69K7sX0dGUl8SMlgCBW-pTkkhZlNeFfl9WBs6ooo3RvFeB9mV-J~jxsOLmK9WswHqpjcojPvsDJHUr6mFu6VTH~kjvhgduLU2xci-gB-feKT7GI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Kamerzysta-3.00.159-instalator.exe

Scan kamerzysta-3_00_159-instalator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.