home

grand-theft-auto-install.exe

This is a self-extracting archive and installer. The file has been seen being downloaded from s6216.chomikuj.pl and multiple other hosts.
MD5:
563f357697c9904edb29fa1a047f6e22

SHA-1:
8bf429ad420088a9e9d93e8101f3a847de8aa17d

SHA-256:
5e95c463a833f058ce3c68b58dc8eeff8ebcac32c1523b7511b5e6ea72076133

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/16/2024 1:14:41 AM UTC  (today)

File size:
30.9 MB (32,422,898 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\grand-theft-auto-install.exe

File PE Metadata
Compilation timestamp:
10/6/1999 12:33:39 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.0

CTPH (ssdeep):
786432:FxCJhdy/GdvT23OGqPTAqfNeu7NORjXDhUad2mpQ6:6oKr0GPTKtzea4sQ6

Entry address:
0x1020

Entry point:
55, 8B, EC, 81, EC, 14, 04, 00, 00, 53, 56, 57, 6A, 00, FF, 15, 08, 41, 40, 00, 68, 00, 50, 40, 00, FF, 15, 04, 41, 40, 00, 85, C0, 74, 29, 6A, 00, A1, 00, 20, 40, 00, 50, FF, 15, 20, 41, 40, 00, 8B, F0, 6A, 06, 56, FF, 15, 1C, 41, 40, 00, 6A, 03, 56, FF, 15, 1C, 41, 40, 00, 33, C0, E9, 0C, 03, 00, 00, 68, 02, 7F, 00, 00, 33, F6, 56, FF, 15, 14, 41, 40, 00, 50, FF, 15, 10, 41, 40, 00, 68, 00, 02, 00, 00, 8D, 85, EC, FD, FF, FF, 50, 56, FF, 15, 00, 41, 40, 00, 56, B8, 00, 00, 00, 80, 50, 8D, 8D, EC, FD, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
2.5 KB (2,560 bytes)

The file grand-theft-auto-install.exe has been seen being distributed by the following 4 URLs.

http://s6216.chomikuj.pl/File.aspx?e=JuKoONqtMGibwZyIViU9Xmm8sMjR2JLg1Phuwce8N_dAhjApgOUXYzZs2tp05tv5pMzgT7oSgGdRE6Y0r7Wv-nsglwhPjuS8qp8kfNU6NfkgUNJTeD3ckpDF1wWWWABYaBDb3jwLIe8riVCrOrZmiQ&pv=2

http://dla.uloz.to/Ps;Hs;fid=214076;cid=1687789680;rid=1843014748;up=0;uip=213.210.151.2;tm=1467895615;ut=f;aff=uloz.to;did=uloz-to;He;ch=ee9545435c7aa9e6fb3b78cacc072d9d;Pe/.../grand-theft-auto-install-exe?bD&c=1687789680&De

http://s6216.chomikuj.pl/File.aspx?e=JuKoONqtMGibwZyIViU9XitiBJ5qwnBbYUhrJLhLRHDMMAxPRd3RfwGXI0bsATMm5OEQhCWGTzyyL5GxO6iXVv6VZ0FPlgS9m88L98EydZ7zRcBfXCvS9bnauq8nmuFWwtOWgpXeVSww6z9l6a7qyw&pv=2

http://s10203.chomikuj.pl/File.aspx?e=JuKoONqtMGibwZyIViU9Xmm8sMjR2JLg1Phuwce8N_eUwCiGaQR45swjBTac2zSVzRcitrgTpjycPwCaLYY98Ye_dsIgTPkcsKf5mD4F4cYzYjg1WMEX5hAKh6fTLCMnJPx1aY04yja54WE5K0i1ng&pv=2

Scan grand-theft-auto-install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.