» gtaiv_patch_v2_2.exe
Overview
Analysis
File Details
Downloads (23)

gtaiv_patch_v2_2.exe

Take-Two Interactive Software, Inc.

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from s10582.chomikuj.pl and multiple other hosts.

File name:

Publisher:

Take-Two Interactive Software, Inc. (signed and verified)

MD5:

cc689d7acb4eb10a721c08ac0f93f7db

SHA-1:

bb2dd9f368d03a2bfcf3eb96a6f66259f1e10ac3

SHA-256:

b8178d0adf89e4b27e1dd01f8dc8c4477a1c9f71a65e448ce7b4f15723a76c73

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 1:34:32 AM UTC (today)

File size:

32.5 MB (34,104,048 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Digital Signature

Signed by:

Take-Two Interactive Software, Inc.

Authority:

VeriSign, Inc.

Valid from:

9/22/2008 2:00:00 AM

Valid to:

9/23/2009 1:59:59 AM

Subject:

CN="Take-Two Interactive Software, Inc.", OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Rockstar Games, O="Take-Two Interactive Software, Inc.", L=New York City, S=New York, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0C56410E7A8CF26E7F1F306FFCE670CC

File PE Metadata

Compilation timestamp:

7/21/2008 10:54:32 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

786432:LejbTAWjpoXa3GDlOgoUir9dOe+e3UFvh9KWk7WIXlNiZZi:LOck6a3GDlwBr9dOenkFvuWk7WIXqZ8

Entry address:

0x340C

Entry point:

81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 70, 85, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 80, 40, 00, 55, FF, 15, B0, 82, 40, 00, 6A, 08, A3, 78, B3, 47, 00, E8, 6C, 26, 00, 00, 55, 68, B4, 02, 00, 00, A3, 90, B2, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 6C, 85, 40, 00, FF, 15, 80, 81, 40, 00, 68, 54, 85, 40, 00, 68, 80, 32, 47, 00, E8, 3C, 25, 00, 00, FF, 15, B0, 80, 40, 00, 50, BF, A0, C0, 4C, 00, 57, E8, 2A, 25, 00, 00... 
[+]

Entropy:

7.9992

Packer / compiler:

Nullsoft install system v2.x

Code size:

26 KB (26,624 bytes)

The file gtaiv_patch_v2_2.exe has been seen being distributed by the following 23 URLs.

http://s10582.chomikuj.pl/File.aspx?e=_i6wmg_O5BW4IxxLG61ujYa2a5-jDQTX8HEPkTcp7noUDFOyUdw2EHvrdI4nDYLOWdAd5TYzIKgbCu3SwbEpemVvsMdxBLmr2dY8RWlq1miY2rBRe9YW6ikJ-J5JJKjkIlTBLJHr819ePQ4sWHuhbg&pv=2

http://download634.mediafire.com/sxau48q933yg/.../GTAIV_Patch_V2.exe

http://download1629.mediafire.com/jnv3wngn13eg/.../GTAIV_Patch_V2.exe

https://mega.co.nz/temporary/.../8BRjRRqB

http://download2094.mediafire.com/vjq59j0kj3eg/.../GTAIV_Patch_V2.exe

http://download624.mediafire.com/avmkjz9bv9xg/.../GTAIV_Patch_V2.exe

http://s6476.chomikuj.pl/File.aspx?e=_i6wmg_O5BW4IxxLG61uje8EiA4m3Vleal0zzkIXYfpF0arcdbJg5o7FhbydLO5KUTVT3lM4Hdk8WjlC2B867TJDL3Irxvy9xYknyQLsaa2WUh2E_aHO1ZrImEj7KMerBPTEPKqKUxCESx-EMGJVdg&pv=2

http://download1253.mediafire.com/mb84ndvdzjbg/.../GTAIV_Patch_V2.exe

http://download1820.mediafire.com/149th6h03dzg/.../GTAIV_Patch_V2.exe

http://s8867.chomikuj.pl/File.aspx?e=_i6wmg_O5BW4IxxLG61ujWWcu2T8b7KJMbVBuXalgb27wLAkEbUFGraOH1rwOP7CJvxDajBp2_nlF0R6up3ALJCePPaKnAQpMc0Cji7io1TP7kN_Am5LMTu4FMwBj2qLCIbDpUKtVqr8zfnEfZ4AFA&pv=2

http://download1827.mediafire.com/vka6pby06dmg/.../GTAIV_Patch_V2.exe

http://download1111.mediafire.com/oniziunl9lyg/.../GTAIV_Patch_V2.exe

http://download1729.mediafire.com/7sb056ewavtg/.../GTAIV_Parche _V2.exe

http://download732.mediafire.com/d5gdo34n1amg/.../GTAIV_Patch_V2.exe

http://download883.mediafire.com/y62l1s1x15pg/.../GTAIV_Patch_V2.exe

http://f2h.nana10.co.il/.../449687427|82f02fdc83ec429f15d6ab5ff23fe302|.exe

http://download2138.mediafire.com/a0k4f6m95myg/.../GTAIV_Patch_V2.exe

http://s10582.chomikuj.pl/File.aspx?e=_i6wmg_O5BW4IxxLG61ujdy7Bmbwg6Ow2MgLGy2gP_CfZiWTyD3FjX9p0ZEyjsoIhtGIPqwSGqfz_ePbWdmZKE9-YDlZ3u86vKm7-M-pkCZlpvNY6iVsPOAGon3B0GktBcM5jJO7uZ_hZvOLSh_vJg&pv=2

http://get-2.wpapi.wp.pl/a,61764431,f,upload/0/b/f/.../cenega_poland_gta4patch2.exe

http://download614.mediafire.com/ootw2h1clxag/.../GTAIV_Patch_V2.exe

http://download2138.mediafire.com/e2xvt0ly85eg/.../GTAIV_Patch_V2.exe

http://dl.4players.de/f1/pc/.../GTAIV_Patch_V2.exe

http://www.4players.de/services/.../download.php?action=start_now&DOWNLOADID=50878

Scan gtaiv_patch_v2_2.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.