home

download gta 5 pc game grand theft auto v full version highly compressed free.exe

Rodion Veresev

The is the installer for the WebPick InstalleRex download manager which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed without consent. The application download gta 5 pc game grand theft auto v full version highly compressed free.exe by Rodion Veresev has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from groupsetzipmyjob.org.
Publisher:
Rodion Veresev  (signed and verified)

MD5:
6e274be2cdea8364237b46a508d40129

SHA-1:
4736d4bb97c27281f6d5825995473288cbce79ac

SHA-256:
009e705ccf4486b31058aefba07d4cba35196113468bb7cfb42ccbcb579d916c

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
12/26/2024 4:23:48 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.WebPick (M)
16.8.6.16

File size:
370.4 KB (379,248 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\download gta 5 pc game grand theft auto v full version highly compressed free.exe

Digital Signature
Signed by:
Rodion Veresev

Authority:
Unizeto Technologies S.A.

Valid from:
6/25/2014 3:22:58 AM

Valid to:
6/25/2015 3:22:58 AM

Subject:
E=rodion.veresev@yandex.ru, CN=Rodion Veresev, O=Rodion Veresev, C=UA

Issuer:
CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
715A33AE9117D0C2B07CE5B9C396152A

File PE Metadata
Compilation timestamp:
10/11/2012 8:12:12 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:b3SnBFuCHf6His84mczvavWPVCNeBtciaZjIHpDwYzkjBUsUBz7Lv6mQHruAYrEJ:zgpSHitcDaq6eBtqY9loJ

Entry address:
0x1ECAB

Entry point:
E8, 54, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, A0, A2, 43, 00, E8, 5F, 17, 00, 00, E8, 21, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, E7, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, C8, 0B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
6.0808

Code size:
143.5 KB (146,944 bytes)

The file download gta 5 pc game grand theft auto v full version highly compressed free.exe has been seen being distributed by the following URL.

http://groupsetzipmyjob.org/hp/?q=y06N1HfTxL3ZJ9/XZTKVsFYdF2ioQbOEOL6btwXEOo5xbiJ31JTVirZ8NcfbAXQ8oGJirrLY1exPPocqpI6FrLpAal7vuXGVgWngdm/53ODfbqvRHJRn 1mWEy p6RyYHeLi6F7y5mkm8iZQnYVG3P/Klz1MJZI9uNVPBIT6Kg6GjCPlQwDOSZ/EHpQG4BytQ6hCr78CITL5KdlzV6OnM2HRqeySUA4uzmz9WkW/i cuYEZx4xCoaA3x/beN7qYk/pC/hzZIR6BYyVxDGz/jU1LIniXorE2d7fpED6XLqMjLmbg5kI3eV7QUvpx3JwlRsPFPm8KVG CDJtrnwu26dNVZB0lWoKv0zmVpaIXD1nkqkyl9xPhXlhm0oGV0WaA3MUFx3/jDZOgiP1aepro0 uP9wjqJX7/KjxJM vegNf3oM2Xuw81K/ctDxXO6Yel adXGRBCz MozlQf9Z8npy/pFp3q1EHvoS6CSs1pZnEeZ7wOL7nyftLuGyF7dZhLMyLpsQErj3L9MoDQB96BNOGr4dqtrtduJg7Prp2y6ctPpXaoaQw/RWt8x4KuX8iWiIq9uLZuUgU0Widi8C4YrjOJbuIjrX4dad1YnjS01lN/ l3sQm0w56ta1 0DKkwTq3zSu3AywjgHmhwBhDG/e22OMFR64LlNSj8OFttOaPScWAOmfUMpgzcGRbDcNtV0o2tWxD/BCvFDn14s FTedth9e5rPeHe3cyLJQBKqjnSM1X/.../mz&external_id=1429457639300513472

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.