home

31369 gta grand theft auto san andreas 2005 pc repack by klonebdguy.exe

The executable 31369 gta grand theft auto san andreas 2005 pc repack by klonebdguy.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from lps.ezdownloadpro.info a web site host known to distribute potentially unwanted software operated by Rafael Leviev.
MD5:
d3dd30742193378c79e5b0e2d348eb4e

SHA-1:
c1a425bd11d868d56acfe3768338ae6e6cb032e0

SHA-256:
57b88959395eed94c23675894c8b2004419aca47ff6ee00f9bb583d0b3601105

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/8/2025 4:09:39 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.7.30.1

File size:
1 MB (1,068,544 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\31369 gta grand theft auto san andreas 2005 pc repack by klonebdguy.exe

File PE Metadata
Compilation timestamp:
8/13/2012 10:28:36 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:xA1RXo9F2Z5pwEHqsIS5pVIiovH/8xXdRr:O1O9YZHjISzyiUH/E

Entry address:
0xDDB72

Entry point:
E8, DF, 14, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 30, 0E, 4F, 00, E8, E8, 19, 00, 00, E8, AC, 16, 00, 00, 0F, B7, F0, 6A, 02, E8, 72, 14, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, E8, 02, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Code size:
905.5 KB (927,232 bytes)

The file 31369 gta grand theft auto san andreas 2005 pc repack by klonebdguy.exe has been seen being distributed by the following URL.

http://lps.ezdownloadpro.info/hp/?q=rFYGAYlAGBOls12345WkH69mnXExEVJAbzsHbiYnSUby5GhfbhSacJzh3jnljxEPmlRdbv4xWF7X6w6xBnyl5v8meXGM2nVxRSxYFTnn89Og8Wl 6kuiyBisMNpPLcu4JwJkrE48NqVet0Gp0HZRaxJuG9p7FgLU90OC6EQ8u/zOdaxZpFIo R1nVbxVmFxDLewK 0g/pU7kz964PprVkI3uxln5b pkv93eMBMMav1cSTKaIwdUflUHVC I/D3eN0iI5AmXehiYxRZsKStIvBC1qVzb5df9fxe8ANDfT6xMuzVYWEfB2/qkRf4eKva9UbaTy3e/KfqLxZOIYG2ZxGf/DqBn4PzV/KvQg9QaidjPP ZR2Yf2o0VBX5KgzLCsqYqyGJLtKhKVORhEoSyJkMv56t0rv6ERWGAWYFUv8tjYWlRWggxVrzT6lBhbvprrABLNpHokDq/o4Ykib5OhWAT0IErL3nXBxplnrXsZFhW/PVov8Emhm Sp1nGN530Jopp9M5Pldj52p5KptWAY MmDhhft9c7lSCf5/6jnC0HDq/.../vVsZGY92vyPbltHq0RoCMWSbW78kx2BPrLQL9rC7y3beFvWEaIVjWA1kQfZ791VUe4iyYy5jpL6xp6tp fqYVGS5deAHF05BKTkucuUbLOFmnaw7EIlcXTMkqHeI2aMVAPLPNAx&external_id=1425369570634202081

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.