home

gta_v_playstore_v2.2.exe

GTA V PlayStore v2.2

GTA PlayStore

The executable gta_v_playstore_v2.2.exe has been detected as malware by 7 anti-virus scanners. The program is a setup application that uses the Nullsoft Scriptable Install System installer, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from gta-iv-san-andreas-snow-edition.ar.softonic.com.
Publisher:
GTA PlayStore

Product:
GTA V PlayStore v2.2

Description:
GTA V PlayStore

Version:
2.2

MD5:
4fc7f156d1f37495d9c9690b1739be7e

SHA-1:
e48955d7a8d246e01b622d02bb595ee43ecc0951

SHA-256:
885bbd136943c86bd7b73a930d55d4a90e4f71552b1e55bda254c9474617c90d

Scanner detections:
7 / 68

Status:
Malware

Analysis date:
11/24/2024 3:08:04 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Kukacka
160518-2

Dr.Web
Win32.Sector.30
9.0.1.05190

Emsisoft Anti-Malware
Win32.Sality
11.5.0.6191

ESET NOD32
Win32/Sality.NBA virus
8.0.319.0

F-Prot
W32/Sality.gen2
4.6.5.141

McAfee
Virus.W32/Sality.gen.z
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.223.145.0

File size:
1.2 MB (1,213,024 bytes)

Product version:
2

Copyright:
GTA PlayStore

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\gta_v_playstore_v2.2.exe

File PE Metadata
Compilation timestamp:
12/6/2009 12:50:41 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:LIEdtq3KlaFKUAaCREVwSgmz/nspQs5u1PxBw/b3mXxLmkvb8laFKUAaCo:LIk0+L9RCSo1PzwT3mXxaZL9o

Entry address:
0x30CB

Entry point:
60, 69, F8, C1, 3D, 23, 16, 86, F1, 3B, F9, 70, 02, 88, D7, 75, 0B, 15, D3, AC, C1, AC, 69, EF, 27, A1, 48, E3, 81, D3, 3E, 15, 82, B3, FF, CD, 40, 81, F9, 26, 27, 00, 00, FF, C8, 52, 68, 79, F8, BA, 00, C6, C6, DC, 0F, B7, C0, FE, C0, 88, FB, E8, 1E, 00, 00, 00, 48, FE, C1, 40, 84, CD, 8A, E5, B8, C2, A7, 79, 34, 3C, EB, 87, EB, 2B, D0, 84, F5, F7, C7, BA, 0C, AF, 1D, 0F, AF, EA, BB, 6F, B3, 28, CD, C6, C2, 9D, 69, C1, 64, 7C, 74, 82, 8D, 3D, 63, A3, 23, 21, F2, B5, 28, 33, EB, 75, 0A, 8D, 3D, 1F, E7, F8...
 
[+]

Entropy:
7.9061  (probably packed)

Code size:
22.5 KB (23,040 bytes)

The file gta_v_playstore_v2.2.exe has been seen being distributed by the following URL.

http://gta-iv-san-andreas-snow-edition.ar.softonic.com/start-download/.../a308ead85deabea2e7d50561aceb1957

Remove gta_v_playstore_v2.2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.