home

gta_vice_city_cenega_pl_by_krzys141295_-_boniu.exe

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Description:
Grand Theft Auto Vice City PL Setup

MD5:
5eb5efff8bfb8af237371a45e30f1ff8

SHA-1:
71ed880b5b57d66c58861f4e0ae0eeb65cd1d017

SHA-256:
6eaeb42cf839f5b5c848b6527418427c51e51a365b392faaf1c1024cb98df08c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/12/2024 2:00:56 PM UTC  (today)

File size:
20.2 MB (21,167,702 bytes)

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\gta_vice_city_cenega_pl_by_krzys141295_-_boniu.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:Ds0K7Biho7R6jTzx7mfapXDLYPt7X08uB5FWWvcpGbz65/cICS:LKVih46drXDEVjul9EKWFNT

Entry address:
0x9A54

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 72, 96, FF, FF, E8, 79, A8, FF, FF, E8, A4, CA, FF, FF, E8, EB, CA, FF, FF, E8, 12, F3, FF, FF, E8, 79, F4, FF, FF, 33, C0, 55, 68, 02, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, CB, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 06, FA, FF, FF, 8D, 55, F0, 33, C0, E8, B0, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 23, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Entropy:
7.9999

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file gta_vice_city_cenega_pl_by_krzys141295_-_boniu.exe has been seen being distributed by the following 9 URLs.

https://docs.google.com/uc?id=0B0fCuVQuHdgQN1hKS01iMGs0NmM&export=download

http://s8372.chomikuj.pl/File.aspx?e=ug9b9071N_ckbCPle8-WTNIhCfZgvwqB-b0pspgdvmnU6_9h6NWpr9BX-wyLb4SBkJNhcfNRGvzI1p0crHhxw4663qCHIvI3gLQ1hWfjZXQ7r9zcg9g5_NQV7XvssylmNSGrHkp5b_HOOqPXV1M7F5_BBy-5Tr-WO9cO9NuLbrVvFucr89sOHBZvoPJzvAB9&pv=2

http://www.bytesendclear.com/yzTe4Sl BhnfnoZqDjE2K20LYcToYYJ26mPzQKCerW4S3EkddCvj81lqSarJNqlU10kwbm1rMztYj WC8de0mipM9OJ9yH95zcM6NB5l4llt4FRq7BL3314nL4fDf6wDfc3SEPFPVo_19A9i5cwfJprc0lQAq kHVfgzcbUIDRxZ93CtAZna Vxo7KrC1hmHDht58rLSolh0RtPWHumLiOTPx4jtqcroYFWd3e0RD56ZsmCYnfcBTLljE8n2iJlr Cv3eQbp5kobNlrOZiB0qGn89ogadHZXQVtLzW32ufp gFCJ0T EjYxllm73 7jfamteEtZOhA5E8UNoPDQEhJ_9nkTCKcu9_WSxUal WhgZpzFQfJVIoPqljDucrltkoT OoiWubct05Yqd92TcnbR4pChiBh3QVgdYMxbhJFfiWU8zspJ0uuFlXclRV2kPt6Y 2JaYjcX5 9Surj6oDzAllklaXNtRrX6_xKlQCpSUE5DCZRQ6b7GG2080BYM1UChL1gAbY4g8sN6z2iGugjL0x4cDcuKNAkEfpjXB_7ewZGou3c_OG4EKuQu7_bTIdkeriIe1PfYZ8TYhOE4aVPq_dIVJJA==-G1AAAORwXUy7hQy92AGDQw4cvmsGAXBCwUQOKInaLveNWRSUO2Fd9qycu6Fcmv2DdcRq_4xw ffvGTI2GYq wyomKfNtb TbUL0V-E

http://s8372.chomikuj.pl/File.aspx?e=8oMwxiEWJZqx_lRaCcUQlE_0VVGe0TkA_yIpmQdJNmnZlxbedYe6xGpQb1Ku3xl_XqSlPa5VkTaWSTH1eCJEy_Qx_HyzCyIUvEURjsDW64X28nCWcNywnlK3YjcgVqW7UiSmwk6XYTVPb5Y87U2En7qWhHXF3SOtnj-J3tWclss&pv=2

http://modbase.pl/downloads/.../05-07-2012_www_ModBase_PL_Grand_Theft_Auto__Vice_City_Cenega_PL.exe

http://s8372.chomikuj.pl/File.aspx?e=DjbPHyzhU_nIQwqafjjT5n2Dt7jqjWl211RBhaj6B7jGZmR3301rBHZILj-4vuwTGDAQ72IBWS8Iw3bo7SFIqK68t9t8K34hFWuMK1F8Og4mpTD2BHo9OFa1uVFnKb7k8jKI1ta4BE8yi40rHAfRkAA_TL7JytHIQ3URQA2PERc&pv=2

http://download.gtasite.biz/.../2716_Grand_Theft_Auto__Vice_City_Cenega_PL.exe

http://s10214.chomikuj.pl/File.aspx?e=DjbPHyzhU_nIQwqafjjT5gmM6TwUHik9okh4l2FS6VXyDMyHDKiWYlqaSD5_ujyA0v4oZSK2L8zJ1y3mZBPY8JNDdEd0ZX9qsDzRzPnRV-gd9BLKJQyX2UoRzd7-Tap_TCER1P_RqLimcaTdlcW7zoGkfMFGAHOMc2NEVNZKhZE&pv=2

http://gtasite.net/download/2001/.../pobierz.html

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.