home

free download highly compressed gta5 pc game torrent file.exe

ProductName

Renome Servis LLC

The application free download highly compressed gta5 pc game torrent file.exe by Renome Servis has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. While running, it connects to the Internet address mediafiretrend.com on port 80 using the HTTP protocol.
Publisher:
CompanyName  (signed by Renome Servis LLC)

Product:
ProductName

Description:
FileDescription

Version:
4.1.2.1

MD5:
ec4e5f83463c18a5120e75d8e626b7e8

SHA-1:
c1014dc7733f1b03e6b1fc9bcb88f91b73b0d9ab

SHA-256:
45248e258abfb48a6566fd73318cff788786b242c376e513455720df77990210

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/30/2024 9:24:40 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Amonitize
17.3.10.7

File size:
5.5 MB (5,775,032 bytes)

Product version:
1.3.3.1

Copyright:
LegalCopyright

Trademarks:
LegalTrademarks

Original file name:
OriginalFilename

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Digital Signature
Signed by:
Renome Servis LLC

Authority:
COMODO CA Limited

Valid from:
2/26/2017 4:00:00 PM

Valid to:
4/1/2017 4:59:59 PM

Subject:
CN=Renome Servis LLC, OU=IT, O=Renome Servis LLC, STREET="vul. Kostromska, 25", L=Rivne, S=Rivnenska, PostalCode=33022, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
51CC846515CD44A6F9B54AB30033E78F

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

Entry address:
0x1C6498

Entry point:
55, 8B, EC, 83, C4, D4, 53, 56, 57, 33, C0, 89, 45, DC, 89, 45, E0, 89, 45, E4, 89, 45, E8, B8, A8, 59, 5C, 00, E8, 63, 17, E4, FF, 33, C0, 55, 68, 23, 69, 5C, 00, 64, FF, 30, 64, 89, 20, E8, 9C, CC, E3, FF, A1, 0C, DB, 69, 00, E8, 82, F6, E3, FF, 8D, 55, E8, E8, 12, 44, E4, FF, 8B, 45, E8, E8, 5A, 46, E4, FF, 85, C0, 7E, 3B, 89, 45, EC, C7, 05, 18, 5B, 6A, 00, 01, 00, 00, 00, A1, 18, 5B, 6A, 00, 83, 3C, 85, 10, DB, 69, 00, 00, 74, 14, A1, 18, 5B, 6A, 00, 83, 04, 85, 10, DB, 69, 00, 01, 71, 05, E8, EE, DB...
 
[+]

Entropy:
7.5940

Developed / compiled with:
Microsoft Visual C++

Code size:
1.8 MB (1,858,048 bytes)

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to mediafiretrend.com  (67.222.134.147:80)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.