home

gta_sa.exe

This is a setup program which is used to install the application. It runs as a scheduled task under the Windows Task Scheduler. The file has been seen being downloaded from download2119.mediafire.com and multiple other hosts.
MD5:
170b3a9108687b26da2d8901c6948a18

SHA-1:
185b73fbceaa05d66452691fc0d15c8d61b92a7e

SHA-256:
a559aa772fd136379155efa71f00c47aad34bbfeae6196b0fe1047d0645cbd26

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
4/25/2024 8:38:58 AM UTC  (today)

File size:
13.7 MB (14,383,616 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\rockstar games\gta san andreas\gta_sa.exe

File PE Metadata
Compilation timestamp:
4/28/2005 4:31:22 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.0

CTPH (ssdeep):
196608:KYQnnDbxRXCeeVJGfp/N+AYqyL3TTrbJvvAi80JFCC:KXnDbnyeeVJGfJN+n1r

Entry address:
0x424570

Entry point:
6A, 60, 68, 78, 80, 88, 00, E8, 64, 41, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, E8, DA, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 44, 81, 85, 00, 8B, 4E, 10, 89, 0D, 08, AC, C9, 00, 8B, 46, 04, A3, 14, AC, C9, 00, 8B, 56, 08, 89, 15, 18, AC, C9, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 0C, AC, C9, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 0C, AC, C9, 00, C1, E0, 08, 03, C2, A3, 10, AC, C9, 00, 33, F6, 56, 8B, 3D, 68, 80, 85, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
10.8 MB (11,304,960 bytes)

Scheduled Task
Task name:
{808846F6-8A09-456F-BCF2-E1F72B8F608C}

Trigger:
Registration (Runs on registration)


Windows Firewall Allowed Program
Name:
C:\Program Files\Rockstar Games\GTA San Andreas\gta_sa.exe


The file gta_sa.exe has been discovered within the following programs.

µTorrent  by BitTorrent Inc.
µTorrent is a is a free, ad-supported, lighter-weight BitTorrent client designed to consume less resources then the full BitTorrent version.
www.utorrent.com
12% remove it
CLEO v3.0.950  by Seemann
cleo.sannybuilder.com
About 1% of users remove it
DAEMON Tools Lite  by Disc Soft Ltd
Publisher's description - “Most popular product that offers easy tools for making simple disc image files and emulating virtual CD/DVD drives. Mount *.mdx, *.mds/*.mdf, *.iso, *.b5t, *.b6t, *.bwt, *.ccd, *.cdi, *.bin/*.cue, *.ape/*.cue, *.flac/*.cue, *.nrg, *.isz disc images to a virtual drive.”
www.daemon-tools.cc/products/dtLite
8% remove it
GTA - Los Angeles  by Master Media
mailto:mastermedia@ukr.net
About 4% of users remove it
GTA - San Andreas2 Farsi  by Paragon Games
www.ParagonGames.com
About 6% of users remove it
GTA 5-helium installer  by isatis
www.isatis.com
About 7% of users remove it
GTA San Andreas  by Rockstar Games Inc.
Grand Theft Auto: San Andreas is an open world action-adventure video game.
www.rockstargames.com
1% remove it
GTA San Andreas B-13 NFS 2011  by zhekAAA
About 1% of users remove it
Gta SanAndreas  by Hooyad
www.Hooyad.com
About 2% of users remove it
GTA Xtreme  by Rockstar Games Inc.
www.RockstarGames.com
6% remove it
 
Latest 20 of 16 programs
Powered by Should I Remove It?

The file gta_sa.exe has been seen being distributed by the following 50 URLs.

http://download2119.mediafire.com/10cc821yd24g/.../gta_sa.exe

https://s7757.chomikuj.pl/File.aspx?e=S7gDPMcI0pmOevCJL0Tf7isuSjATs27NONRDJYVVNsdhmkRfeyp_F4H1JTtrAQl3ULmJ-VxMh-53-pXu2Zgp8VRvhfIfT_C0_NYDB7AG-uK4qEvHA5KPp_ufyxXQM3vu&pv=2

http://download1576.mediafire.com/f2sqm421aehg/.../gta_sa.exe

http://download2051.mediafire.com/u6h6n92ao0ig/.../gta_sa.exe

http://401104606.srv1.supershare.pl/getfile.php?id=197504&access_key=5ea308fbdef35a8f91d66081ed2e9d50&t=585d0b83&o=D0349ED04409534D88DD7023EDE9E481D92F9DD542014F4888C07023E8F4B087D728CFD65E03201DDC896C5A96E9E49DD234&name=gta_sa.exe

http://download1442.mediafire.com/22jy7m2lv6vg/.../gta_sa.exe

http://download2051.mediafire.com/gqa3u437fv9g/.../gta_sa.exe

http://s7757.chomikuj.pl/File.aspx?e=S7gDPMcI0pmOevCJL0Tf7ondlH4_Lm9cvlywXm5pG-L9sxqwrP0Kyd2cDfyYD_AMrTonOcVlJ0xDP0jvilnMWOvD-RNwPwlnMrbaPEcFOPITl4MX-N5FgT0Kx32_hog_&pv=2

https://downloader.disk.yandex.com/disk/66f00256a6751238260c95e5bb1b82e5f4d59b82cd749d9e4fafdc21b78134bc/5897b7a1/4Oo8oDIt3Ste4fuQ00T4Zdz6q48fQoxETeMeDvuVyDJHBd9BWwYT2gHHuj9qzjp_90Dd9ANo99rY4KywJKfebA==?uid=0&filename=gta_sa.exe&disposition=attachment&hash=WzOa/.../x-msdownload&fsize=14383616&hid=7a36028ac146ebd2acf28f51fc472a7f&media_type=executable&tknv=v2

temp:Wattan Arabic.exe

https://downloader.disk.yandex.com/disk/2208eee1d17a36109c718361bb696fc02fa2dd0192b57e5e88af8ade6123ef83/586844fc/.../x-msdownload&fsize=14383616&hid=6800bfc6aaa3cf89c6000c467d9c5750&media_type=executable&tknv=v2

http://s7757.chomikuj.pl/File.aspx?e=S7gDPMcI0pmOevCJL0Tf7uph3YDJRutqRWtRWOWpSzX_6xXW63b5JjIkFJZpx2MlEftoPVpGJ979JWJGLqmukBJFo41Yty-D2ZVe3z7nj4UJb4UvcEulhFLY8p8AukSn&pv=2

http://download1688.mediafire.com/e7b0n96fwgzg/.../gta_sa.exe

http://dc375.4shared.com/download/.../gta_sa.exejogosparapc?tsid=20170213-171200-e80a3ead&sbsr=e16bb46840cda1379199c33ab6b4151c99a&bip=MTg5LjcxLjQ5LjE3Ng&lgfp=2000

http://s6649.chomikuj.pl/File.aspx?e=wUFF-sN1S-9rl4xeNHjE7Q0g_phueEPiltvfPfNCPvMgBzaFD05qsezpAAlb3nXhjwY8KLufZy8xNczYhFRplM3Hw5Pj8bXZjKrLiL3KwQ9-R9DycgELpFQLtZ2hJRgO6zwWbdqMc1lwUEGEIe5ZNw&pv=2

http://download958.mediafire.com/nv05syeubgcg/.../gta_sa.exe

http://download1596.mediafire.com/1ags63lmhsbg/.../gta_sa.exe

http://samp.lv/cdn-cgi/.../chk_jschl?jschl_vc=c284714f2ce9b28f9031c0ac787b96fe&pass=1484929445.084-WyNkJQXvAG&jschl_answer=37

https://fs12n2.sendspace.com/dl/836a558052c9a20a48c682eeeafa52b7/58ac845c37871118/.../gta_sa.exe

http://download2152.mediafire.com/cl138tpfvg3g/.../gta_sa.exe

http://s7757.chomikuj.pl/File.aspx?e=ugaAYxVFYWxgJofdhsp10RmIgl77JZu3ezmVys44XsnN29Hv1zw2Oma-_zJEAbgNJiVwpd_5NGTM67KLDQc0sS_mMUXnwbYQNyzE9cJq39f3VAy-kVQBsqM-9ErkAGY5&pv=2

temp:GTA 5 FARSI.exe

http://s7757.chomikuj.pl/File.aspx?e=ugaAYxVFYWxgJofdhsp10TcXWu4rzwv5_LxT--j8lUV0f_Y5F1U9bIe1rT_fJIQAMdHyb16b__obXtkCx0T4JkVxGSWm9K_0dM7T32Hx7cNehPBuOBSwpSN1C12D0oaH&pv=2

http://1351602128.srv1.supershare.pl/getfile.php?id=197504&access_key=167950cd59e839ca06c69dcdba097712&t=5852d440&o=6D7EAA5E074CDC1CD5673692EDF925123CE218B3D1077F32B3B95047DDBC3744126D31AE40012B95519C7A53F0F4E73B1029&name=gta_sa.exe

http://123865927.srv1.supershare.pl/getfile.php?id=197504&access_key=709edd388b38a46e6b274bc78a26af32&t=5856e8a7&o=CAB345BCEF830C23154016156028B390C3A846B9E98B1026155D16156535E796CDAF14BAF5897F7341140A7F0728B18CCAB3&name=gta_sa.exe

http://www57.zippyshare.com/d/19853081/.../gta_sa.exe

https://doc-10-68-docs.googleusercontent.com/docs/securesc/nij6s4eog2mjv9akm7umrctcio1996r2/1mqk0evntbtlvfiuso6ovcd2sr8fp9p1/1485237600000/01658195874549653839/.../0B3tRIpSCm1a4TkkzT1p0Qjd5NkU?e=download

http://1366953632.srv1.supershare.pl/getfile.php?id=197504&access_key=f017573f7cd468cc1bbb666bbeda0e55&t=585f5549&o=E5B1715963BAF13A7C88F71B890E6F0AECAA725C65B2ED3F7C95F71B8C133B0CE2AD205F79B0826A28DCEB62F20E6F16E7B1&name=gta_sa.exe

http://gta.telnet.bg/downloads.php?cat_id=2&file_id=1

http://download1697.mediafire.com/5v5kxn07osng/.../gta_sa.exe

Latest 30 of 376 download URLs

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.