home

noRGSC.exe

免RGSC破解补丁

游侠网

This is a setup program which is used to install the application. The file has been seen being downloaded from dosya.co.
Publisher:
游侠网

Product:
免RGSC破解补丁

Description:
GTA IV 免RGSC启动器

Version:
1.1B

MD5:
cf6c7280af76f724f93a51101294e99f

SHA-1:
e69963862d47949b7b26bb70ab19a840bf99cb0d

SHA-256:
4dfbbc1dbdb4d9cea79c24d4e039811a6a7f69d2085ae0859fa6ac77a8bc44ea

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/23/2024 5:30:25 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Packed/MoleBox
7.1.1

Bkav FE
HW32.CDB
1.3.0.4924

McAfee
Artemis!CF6C7280AF76
5600.7177

nProtect
Trojan-Clicker/W32.VBIframe.1086100
14.02.16.01

ViRobot
JS.A.Iframe.1086100
2011.4.7.4223

File size:
1 MB (1,086,100 bytes)

Product version:
1.1B

Copyright:
Free Software BY wrss@ali213.net

Original file name:
noRGSC.exe

File type:
Executable application (Win32 EXE)

Language:
Chinese

Common path:
C:\users\{user}\downloads\norgsc.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:QdtAkuLizCuMgU4viKj10vYxfseNrJd8SYAQF2snNw:Qt/umzZMP4vXj1W29HCSYAQFpNw

Entry address:
0x2687F3

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, 33, 48, 8A, 48, 50, E0, 26, 3E, A9, A5, BB, 44, 9E, 15, ED, 92, 71, E3, CC, 96, A2, 16, 9C, BB, 62, 43, 18, B5, 4F, 35, 91, FB, BA, 70, 0D, 36, C3, A9, 1F, D2, 3E, FE, 0D, D1, AB, E1, 83, 46, FB, EB, 0C, 7A, 7D, EB, 62, A0, F1, 26, A7, B8, 1D, 93, C0, C5, E9, 3A, 60, 00, 00, E9, 4E, 60, 00, 00, E9, 49, 60, 00, 00, E8, 6E, FB, FF, FF, AE, D9, 00, 00, 32, 83, 00, 00, CA, A5, F7, A9, 89, 82, 21, BC, 1C, 96, B4, 9A, C6, 0C, D1, 60, D5, 07, 10, 6C, 5D, 14, A9, 5F, 38...
 
[+]

Packer / compiler:
MoleBox v2.0

The file noRGSC.exe has been seen being distributed by the following URL.

http://dosya.co/.../NoRGSC.exe.html

Scan noRGSC.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.