home

gta prijepolje_10924_i84545410_il345.exe

Sony PC Companion

KASHTAN OOO

The executable gta prijepolje_10924_i84545410_il345.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
Sony Mobile Communications   (signed by KASHTAN OOO)

Product:
Sony PC Companion

Version:
2.10.275

MD5:
e1594870de3496ffd6940d86831f287f

SHA-1:
f552b7a9752ac8244714a1288ab076545ae3defd

SHA-256:
601a7a76ee14981947f7c08d7d1dde2b1e268b5801414fcb3f03a7bdbe446be0

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
5/15/2024 5:07:31 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.2.26.4

File size:
4.7 MB (4,955,864 bytes)

Product version:
2.10.275

Copyright:
Sony

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\{random}.tmp\gta prijepolje_10924_i84545410_il345.exe

Digital Signature
Signed by:
KASHTAN OOO

Authority:
Thawte, Inc.

Valid from:
7/5/2015 2:00:00 AM

Valid to:
5/22/2016 1:59:59 AM

Subject:
CN=KASHTAN OOO, O=KASHTAN OOO, L=Naberezhnye Chelny, S=Tatarstan republic, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
468BE39F7FCABE2D4D2D070862DD916B

File PE Metadata
Compilation timestamp:
11/14/2015 9:42:48 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

Entry address:
0x3C6A02

Entry point:
68, DA, 4A, AA, 5B, E8, 87, 88, FD, FF, 00, 00, 4F, 70, 65, 6E, 4D, 75, 74, 65, 78, 57, 00, 0F, 83, C2, 95, 00, 00, 3B, 45, FC, E9, C7, 7D, 00, 00, EC, 33, 96, E3, 8D, 6C, F5, A3, E3, 68, AF, B3, 69, 9C, A6, 02, 19, 5C, 1C, 0E, 46, EF, 96, E3, 94, B4, DE, A3, E3, 36, 58, 5E, 69, 9C, E7, 99, 5D, 5C, 9C, 7A, 9B, 0A, 96, 63, A4, B7, 0A, 96, 63, EF, 7F, 71, 96, 63, AE, FE, 66, A3, 63, D5, 79, 48, 95, 10, 8B, A3, E3, BA, A7, 7D, 69, 9C, C9, 32, 5C, 69, 9C, E7, B1, 5C, 1C, 33, E0, D7, 96, 63, D8, E8, A3, 63, A3...
 
[+]

Code size:
3.4 MB (3,558,912 bytes)

Remove gta prijepolje_10924_i84545410_il345.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.