home

gta.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from cdndownloadplm.com and multiple other hosts.
MD5:
7e8bba4dd1942f72b9595a82578ab640

SHA-1:
ccb4b27c25ba48e4adc707e01050d4996299bdae

SHA-256:
76f1e1da5c898f755597b86357c4d77b7447cb483673a23d10d34f40cfe03ec9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 4:32:42 AM UTC  (today)

File size:
9.1 MB (9,531,378 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\gta.exe

File PE Metadata
Compilation timestamp:
9/1/2012 8:30:56 AM

OS bitness:
Win16

Linker version:
13.0

CTPH (ssdeep):
196608:szxNrBO6nc8Vu+gP6K3RyllN+2PEkJoJKFPbytCeoV5vB0RmkH7F:IxNlOejiy7MwEkfItCeytSmy

Entry address:
0x502F534F

Entry point:
50, 4B, 03, 04, 14, 00, 00, 00, 00, 00, 42, 50, 6C, 23, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 0D, 00, 00, 00, 47, 54, 41, 32, 34, 2F, 47, 54, 41, 44, 4F, 53, 2F, 50, 4B, 03, 04, 14, 00, 00, 00, 00, 00, 49, 50, 6C, 23, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 0E, 00, 00, 00, 47, 54, 41, 32, 34, 2F, 47, 54, 41, 44, 41, 54, 41, 2F, 50, 4B, 03, 04, 14, 00, 00, 00, 08, 00, 22, 77, 0C, 23, B6, 93, A6, BC, 7E, 05, 00, 00, B0, 0B, 00, 00, 11, 00, 00, 00, 47, 54, 41, 32, 34, 2F, 49, 48, 45, 4C, 50...
 
[+]

Code size:
1.3 GB (1,413,939,200 bytes)

The file gta.exe has been seen being distributed by the following 4 URLs.

http://cdndownloadplm.com/dl/?z=1163&name=GTA&file=http://www.rockstargames.com/gta/.../gta24.zip

http://files.downloadnow.com/s/software/88/50/.../gta24.zip?token=1471908560_4dfe99c1644e0a5143ccb9668a3ecb29&fileName=gta24.zip

http://files.downloadnow.com/s/software/88/50/.../gta24.zip?token=1467870046_8ad01cd3344494df6ef5b370a5049f8f&fileName=gta24.zip

http://www.rockstargames.com/gta/.../gta24.zip

Scan gta.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.