home

grand-theft-auto-san-andreas-patch-1-01-32-bits.exe

Soft Web

The application grand-theft-auto-san-andreas-patch-1-01-32-bits.exe, “Soft Web Setup ” has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Inno Setup installer, however the file is not signed with an authenticode signature from a trusted source. The setup program uses the InstallCore engine which may bundle additional software offers including toolbars and browser extensions.
Product:
Soft Web

Description:
Soft Web Setup

MD5:
1610f6654a64c60e9ebb47eb6a0e2ff8

SHA-1:
adcc20832e6065bb6033c4336e45e577c68fac77

SHA-256:
fc621b42d34816342b10cd62bf982fd2e9a54ae08e503b574d857cdfa6ab4d73

Scanner detections:
1 / 68

Status:
Potentially unwanted

Explanation:
Uses the InstallCore download manager to install additional potentially unwanted software which may include extensions such as DealPly and various toolbars.

Analysis date:
11/26/2024 11:22:16 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.InstallCore.RES (M)
16.5.11.12

File size:
672.8 KB (688,923 bytes)

Product version:
3.4

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\grand-theft-auto-san-andreas-patch-1-01-32-bits.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:ByvpnVDAMlxTmZdr3HBx5qdgS/qZ+U9jadVoqzW7WaG3DzDc5wYpNTeaMMa:ByvRVkvZlRTq/qZ+Yjsoqz+03DHc5vbI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, 53, C9, FF, FF, E8, 9A, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file grand-theft-auto-san-andreas-patch-1-01-32-bits.exe has been seen being distributed by the following 2 URLs.

http://d.likelyaa.com/?ic_user_id=9289&data=TfH oPScQNsQs2XrOansB/PDZ3DvH/oh7UfxbqR/yph9yvetDHu6m/i7cmBlKK4SsucAv5xhD42zvTx hB7E3j8LeKani8vTr257xIzstdQ44EFdL/VKPW aD6XK6VrzULIrDMpLv PvvK2RRl9N32HUY5RzluxtMKM9AB4LMbktHn cVjSyo9vob09ESWBGd378giJH/sVItsJ7clQQbWtfh3BN5S3hZt3OkpPiH5ujHV6n3EwjZ0LkPjZ9KWYSVErV2YqNnBB5lX8SEwlvM7G7GopaFclIOsQ0h33W3XFXDJb89MD4WAKui/iZn6aQnv7joUhVcCEcjGIvT/B3gmEkEFQoc3 DowShWxGVUZeI6jlo3C3Ot9IC7F4gkaMmvbXpfWflMAAM8tYqp2a4rUhSdupk4yZY/tymuw1P75Li34XuhCdRd3Zpt/PRJvmlEeFfVckOvhAV9lsee1EzYOi7POLbRXt2YvaGYWleaZLWFQJLjgCwJ4uDw8sSOqfZbwHu8acxn/CEVa/saOV9dvCSW2KlyymUuNdOrfUoOsD4kRYnsM8JX0w87YYpTbfkUzBQyWi60NlqOdo1ZyHNoec6S0aXoR60iuSAxk4j2gJwC8p2TGY3cu9RYhJuCH24gMRVTiq7w XSqVIzdM9XzgvR6V qDgv41VhwmfWkUEGKVeGnsgFetfd/eDfSAdCzwxCy3LrFezm7/CLjhx ud9KHy89etnJJHdmpA6G/wG2qHV2ltibYJeho&key=a2SZUMdRO305oOH/qvDGaI8tQSJi4KWQRhL/vpb/qQcNAMJJubV10FAKV36cN/pz4srfFFkhggaK0njILdnGkoHlVkzbRWdZPNPkdKrnaV4HkIYvoMLqxcXdz/.../sxOOjQXcw0S6Yaj07CYEGknyRFXNpFMqTAyhWOe9E8

http://d.likelyaa.com/?ic_user_id=9289&data=DIcG/ataFEdrlKVenYcQClkGUJjgeXP8ZJLpR8onHoZnqDxDUnAy2xd8awZcT27fA/VJTqlpPRKsFv5 fEbnTG9Dl8LuGBe35f62AhiEY8G8Uz2yhps Jrbg1L2K4xqzC3Kz/lFmJ48HWPxw//z81tBaC0oxYhAlZetQQHAzRudZbouIB808YfTd8xLvNZSQyPmKlOtLxj5vYSLmwGlC0RB Qc8jTqI3d13h9Yz0XmO5nNgADV3J/EEeOiyz29ah5XVjzwOcyIVCKYewdrkjxnYvOaF3eO6rzud44eOaRzPBQ6tFg5ejgwU7qcfkmwdLDufsyOHqsK0ui3xjqjEXAtPPVjLHIMiSGk8iGekBdpitcdIThaEIxYrI2MPSaz6V6LlTkOAfMlPHw0eqbBNMK44VdOLRxVSEyIesNPQXAjdsE4ctBigI8n5d L/OXTc3kmEOmC3UhWFn8yYcMEbmmzYTpi0zFF6ur24d VXj0w829GjX4 IfGGgOyqRybkJMuTfaixR54NpTvpajZ/37PKFIW8pXhE6XJy191ot4WwT7Y6klYQ7onJK/YNx1g4mj89MhHBpZ22PA/kykf2QWhNJwSvOcuHZWFNy6z1OYkU7vPJj5FAxxmzeEXy/jxWU783ynMFrSZa0g0Fk/ocoB0MF8KDynTK4 AnGqZltyuPqq165qWCvhZX6mehhWMY84GdDdZBJlIcKeRTbzLzTbOWA8GAPaXYLb122bsRhm AoIgL7FZi98tMh&key=iWMbQDUjgi8yhNhSuPGLZUt5u7jpZilKE/.../nAqdSjrQaihZ3XOlNGXZIsl5utSymscMYjMHm1lyihzfvVcPDF9Plq72RgFepbsir5

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.