home

gta iv for pc with working crack-no drunk cam! (1.0.4 patch incl.exe

Unitech LLC

The application gta iv for pc with working crack-no drunk cam! (1.0.4 patch incl.exe by Unitech has been detected as a potentially unwanted program by 14 anti-malware scanners. The file has been seen being downloaded from amazingthingz.net and multiple other hosts.
Publisher:
Unitech LLC  (signed and verified)

MD5:
38a5f33b4a86669a312552d71e3d1828

SHA-1:
66d53e480eaa305ff6b62804ce60828ebc0073b5

SHA-256:
4ec90562e175345175cdf90294060abe0c57ac4d2f6ca27ee75f53fc4fa1f16d

Scanner detections:
14 / 68

Status:
Potentially unwanted

Analysis date:
11/15/2024 6:42:17 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.Gen
7.11.166.104

avast!
Win32:Malware-gen
2014.9-140924

AVG
Skodna.Bundle.3d5
2015.0.3434

Baidu Antivirus
Trojan.Win32.Agent
4.0.3.14924

Bitdefender
Trojan.GenericKD.1800295
1.0.20.1335

Dr.Web
Trojan.DownLoader11.26520
9.0.1.0267

Emsisoft Anti-Malware
Trojan.GenericKD.1800295
8.14.09.24.09

G Data
Trojan.GenericKD.1800295
14.9.24

Kaspersky
Trojan.Win32.Agent
14.0.0.3203

McAfee
Artemis!FEDEA1F9F2B9
5600.6998

Reason Heuristics
PUP.Unitech.
14.6.24.6

Trend Micro House Call
Suspicious_GEN.F47V0622
7.2.175

VIPRE Antivirus
Ividi
30602

ViRobot
Trojan.Win32.A.Agent.1283072
2011.4.7.4223

File size:
1.2 MB (1,244,640 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\gta iv for pc with working crack-no drunk cam! (1.0.4 patch incl.exe

Digital Signature
Signed by:
Unitech LLC

Authority:
COMODO CA Limited

Valid from:
6/13/2013 1:00:00 AM

Valid to:
6/13/2016 12:59:59 AM

Subject:
CN=Unitech LLC, O=Unitech LLC, STREET="Kashirskoe sh. 9, bld. 1", STREET="premises IV, room 1", L=Moscow, S=Moscow area, PostalCode=115230, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
008422F9D83C113BC0C58A45C1B790465B

File PE Metadata
Compilation timestamp:
6/21/2014 5:10:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.22

CTPH (ssdeep):
24576:7GDuFmSDuFmlYoVn14mBFgcma4QorNzdE4oa:94t4lYox14RA4QorHE4oa

Entry address:
0x12A0

Entry point:
83, EC, 1C, C7, 04, 24, 02, 00, 00, 00, FF, 15, 60, 61, 40, 00, E8, 4B, FD, FF, FF, 8D, 74, 26, 00, 8D, BC, 27, 00, 00, 00, 00, A1, 80, 61, 40, 00, FF, E0, 89, F6, 8D, BC, 27, 00, 00, 00, 00, A1, 6C, 61, 40, 00, FF, E0, 90, 90, 90, 90, 90, 90, 90, 90, 90, 8B, 0D, 0C, 20, 40, 00, 85, C9, 74, 38, 55, 89, E5, 83, EC, 18, C7, 04, 24, 00, 30, 40, 00, E8, FC, 09, 00, 00, 52, 85, C0, 74, 23, C7, 44, 24, 04, 0E, 30, 40, 00, 89, 04, 24, E8, EF, 09, 00, 00, 83, EC, 08, 85, C0, 74, 09, C7, 04, 24, 0C, 20, 40, 00, FF...
 
[+]

Entropy:
6.4974

Code size:
4 KB (4,096 bytes)

The file gta iv for pc with working crack-no drunk cam! (1.0.4 patch incl.exe has been seen being distributed by the following 23 URLs.

http://amazingthingz.net/.../get.php?channel=7348&rk=25519299

http://amazingthingz.net/.../get.php?channel=7334&rk=65779452

http://amazingthingz.net/.../get.php?channel=7348&rk=74170898

http://amazingthingz.net/.../get.php?channel=7348&rk=31415098

http://amazingthingz.net/.../get.php?channel=7349&rk=24185154

http://amazingthingz.net/.../get.php?channel=7334&rk=55946929

http://amazingthingz.net/.../get.php?channel=7348&rk=17316465

http://amazingthingz.net/.../get.php?channel=7334&rk=65698126

http://amazingthingz.net/.../get.php?channel=7348&rk=46469485

http://amazingthingz.net/.../get.php?channel=7349&rk=66874034

http://amazingthingz.net/.../get.php?channel=7348&rk=8839886

http://amazingthingz.net/.../get.php?channel=7348&rk=86568933

http://amazingthingz.net/.../get.php?channel=7334&rk=28708513

https://s3.amazonaws.com/.../StartDownload.exe

http://amazingthingz.net/.../get.php?channel=7348&rk=54068961

http://amazingthingz.net/.../get.php?channel=7348&rk=53827487

http://amazingthingz.net/.../get.php?channel=7348&rk=10227143

http://amazingthingz.net/.../get.php?channel=7334&rk=37915335

http://amazingthingz.net/.../get.php?channel=7348&rk=94120313

http://amazingthingz.net/.../get.php?channel=7334&rk=50376574

http://amazingthingz.net/.../get.php?channel=7348&rk=55526653

http://amazingthingz.net/.../get.php?channel=7334&rk=24351163

http://amazingthingz.net/.../get.php?channel=7334&rk=79989646

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.