home

gtasnowedition.exe

GTA Snow Edition

NSIS

The program is a setup application that uses the Nullsoft Scriptable Install System installer. The file has been seen being downloaded from gta-iv-san-andreas-snow-edition.softonic.com.
Publisher:
NSIS

Product:
GTA Snow Edition

Version:
2.2

MD5:
dbb3224a36b0027f811c6f59017e0c73

SHA-1:
47f8ac155801deb10e4f929ab2c5a3694c3e48a5

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/1/2024 7:31:11 PM UTC  (today)

File size:
1.1 MB (1,123,139 bytes)

Product version:
2

Copyright:
NSIS

File type:
Executable application (Win32 EXE)

Installer:
Nullsoft Scriptable Install System

Common path:
C:\Documents and Settings\{user}\My documents\downloads\gtasnowedition.exe

File PE Metadata
Compilation timestamp:
12/5/2009 7:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:vIEd3/qxDlaFKUAaCREVwSgmz/nspQs5u1PxBw/BRw4laFKUAaCH:vIkyDL9RCSo1PzwpRpL9H

Entry address:
0x30CB

Entry point:
60, 81, FA, A7, AB, 31, 93, 19, F7, EB, 07, 85, D7, BA, 76, F8, 1F, 16, 28, D8, 0F, BE, E9, 86, E8, BB, 83, 7A, 0B, 02, 89, ED, EB, 05, 3B, D8, F3, 21, ED, 81, FA, 00, A2, 00, 00, 0F, AF, D3, 8D, 05, 92, B2, D0, 55, 0F, BF, D3, 55, C7, C2, FA, 9A, 9E, 56, 1B, C5, 81, D3, 51, 5C, 9F, AB, 8D, 05, 6B, 4C, F2, C3, 55, 39, D3, E8, 00, 00, 00, 00, 5A, 81, FA, 6A, C4, 00, 00, 77, 03, 0F, AF, F0, 52, 84, E5, 3D, B8, 64, DC, E8, 81, D8, E8, 69, E0, DC, FE, C0, F3, 57, 81, FD, D6, 07, 00, 00, 71, 05, 15, C5, CD, B9...
 
[+]

Code size:
22.5 KB (23,040 bytes)

The file gtasnowedition.exe has been seen being distributed by the following URL.

http://gta-iv-san-andreas-snow-edition.softonic.com/download-tracker?th=8yS3 KGEYLiw7GKMHzA/trmsvRChbxdrflJq3ZIylWsIxV3iUas2/qzfoP6RVf8l5KxJYC7OSe14dy5rpeSRY1HKJKPO1FrA/J SYx45UIMGC NLTPf/.../UgZzbsvuF4nXZHzdd4=

Scan gtasnowedition.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.