home

sa-mp-0.3x-r1-2-install.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from letoltes.pcguru.hu and multiple other hosts.
MD5:
588756f98b44337649fa9ab4ef4790f2

SHA-1:
563536fdb2749eb1082bb24a9dc99d37d4c8ef24

SHA-256:
0d49116bf6a97852983b60e6ecec6c4e9a49a6fa0c31174ae14e554400985d3e

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
12/25/2024 3:04:13 PM UTC  (today)

Scan engine
Detection
Engine version

ViRobot
JS.A.Iframe.12022145
2011.4.7.4223

File size:
11.5 MB (12,022,145 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\sa-mp-0.3x-r1-2-install.exe

File PE Metadata
Compilation timestamp:
12/5/2009 10:50:41 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:gOCnxiXLv9IdUj+bzIDdeO/Cu2g4hPNrlmNs80+XoWNKRTfRGmvNStLdmlwr4+CU:gOCn89IdU6bcDQoOtNoNHxNKRTfRGmvU

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 3F, 42, 00, E8, F1, 2B, 00, 00, A3, 84, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 36, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file sa-mp-0.3x-r1-2-install.exe has been discovered within the following program.

GTA San Andreas  by Rockstar Games Inc.
Grand Theft Auto: San Andreas is an open world action-adventure video game.
www.rockstargames.com
1% remove it
 
Powered by Should I Remove It?

The file sa-mp-0.3x-r1-2-install.exe has been seen being distributed by the following 50 URLs.

http://letoltes.pcguru.hu/.../gta-san-andreas-multiplayer.exe

http://download1201.mediafire.com/rx9q7kweitfg/.../sa-mp-0.3x-R1-2-install.exe

http://www.funcyclecapital.com/dbue4DhiWDnZdLLuji 8wTIzEqhEMg7S1IGuYIZd6B83WmjZ5hmfhHsh061LY_xv_6Pdb7O__r835Pfvo4lM7iCRWf43ANz_c9php t2hqtZjcDIVql_i1OWk8FDPRwEaXaTmbzp5bFq09uP3pFjQhs2GxycS3mrj_XRe8 PI7dTJaK1xqkDYHaERUQPU_mcVdMED6LvA0CQROK1m8Ku9ANyvLPDq9avucWs36mHG hzODGT0Tc=-GzEAAARqczHdo5qaoRmMwmBFmMiBQ4sk0APwe9o kDfGaPSbfTrQw5RHOUFHaW4A

http://download1379.mediafire.com/xas0weml8myg/.../sa-mp-0.3x-R1-2-install.exe

http://download1789.mediafire.com/6mm7a3m32rpg/.../Samp [by Nicolas Coronel].exe

http://download1623.mediafire.com/y89p1rujczyg/.../sa-mp-0.3x-R1-2-install.exe

http://download1379.mediafire.com/3ts86mg99lkg/.../sa-mp-0.3x-R1-2-install.exe

http://www.tamindir.com/indir/MjAxNy0wMS0xNyAxNzowOToyOA==/gta-san-andreas-multiplayer/windows/.../

http://gsf-cf.softonic.com/563/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=78075&instance=softonic_pl&type=PROGRAM&Expires=1428623814&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=IPA0MujavMG76VIh6QmszK8Hkw73dE2nfmEaTZ1HJlxWoduqrQbQR4I9y-kU0R3kTUW9zWAijRFsu47emwa94oKDc~Joerw4RM49fb7bW6rynwvtH15LIcyR5B0Jh3rJsQ6TeHrQc3m0rZblx2KQqm4g5VkkPdv2JpI7VEpHJjs_&filename=sa-mp-0-3x-R1-2-install.exe

http://download1623.mediafire.com/1ib8ynyk3prg/.../Samp ByKillFailSourse.exe

http://download1633.mediafire.com/71qb4qiwggzg/.../sa-mp-0.3x-R1-2-install.exe

http://download1623.mediafire.com/hswt5kts8vbg/.../Samp ByKillFailSourse.exe

http://gsf-cf.softonic.com/563/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=78075&instance=softonic_br&type=PROGRAM&Expires=1447830472&Signature=Bd7a~lrs8vziiN~7UFCjr6lRB2DX03CKANAep5mymbhc5oKjjIp~ZC67EZqVOpbXVzU4eANvESBv-LpVs4PVMPpJoQmMxExWteTngx8rnOIsxEJudoqj7zHT4wjLsO0PByV5ILwoVNss0UmZHddKm5ONmGv2O0jfnVbYIZGOlp0_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=sa-mp-0-3x-R1-2-install.exe

http://download1446.mediafire.com/4ojxlxn2ncjg/.../sa-mp-0.3x-R1-2-install.exe

http://gsf-cf.softonic.com/563/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=78075&instance=softonic_de&type=PROGRAM&Expires=1450046348&Signature=Wz12YB9mHB06zvPeU7CE6~wv~DEkDrMQ5AJ-ap985uzeM0j4ry2Vu9Zv9QIEg~0w1GgAxwgJyaVVMZGlK5HA7PwQu4kF47VuyIFGVDEcLuXBPmXy76YcGKxC9fD-RUtN~VYG5-4nWNT73rbobqRD61oquPhMgOslS8qK7lgU-e8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=sa-mp-0-3x-R1-2-install.exe

http://download610.mediafire.com/db0v2dzbwcvg/.../Samp [by Nicolas Coronel].exe

http://download667.mediafire.com/7ypm846a7y5g/.../sa-mp-0.3x-R1-2-install.exe

http://gsf-cf.softonic.com/563/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=78075&instance=softonic_br&type=PROGRAM&Expires=1450828284&Signature=g-7R6vWz70K~eCxEbvJXS3PuXHOork3PEZ34OwL4rX2wISACfaSYmB9Bhs6PvkUtgPax5pwZwxhgOXGXBD8uPIbBV2o6Wpj8irYYlVkBCM3OrfKVmTBeBqn0GG1jsEuXQUlwF3u-kUgh8utmfmm9y8-nbaZroekyAhRbBNh9Xqg_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=sa-mp-0-3x-R1-2-install.exe

http://gsf-cf.softonic.com/563/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=78075&instance=softonic_fr&type=PROGRAM&Expires=1448752545&Signature=ghr4EoAXHyB6Xr3xFXKVrgEdpvUyjGNJ7WjxsNWKPFmNg1GiIQcxpFw9oAhIjiky58BoTNGtGvyZ30Fu1exhemQtzAhXQpvTqjf8~KzqOZk31~UgjEY-Ff5fyRt7QDWRa1yjtHGpwdbhRgfpyXclYjYSf4ypCsYjRORb-1Ro~uU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=sa-mp-0-3x-R1-2-install.exe

http://download1623.mediafire.com/77ajr8hme4jg/.../sa-mp-0.3x-R1-2-install.exe

http://download1437.mediafire.com/4x072g8smnzg/.../Samp [by Nicolas Coronel].exe

https://dracoblue.net/download-release/.../sa-mp-0.3x-R1-2-install.exe

http://www.tamindir.com/indir/MjAxNS0wMy0xMCAyMzowMTozMg==/gta-san-andreas-sa-mp/.../0.3x

http://gsf-cf.softonic.com/563/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=78075&instance=softonic_br&type=PROGRAM&Expires=1450518225&Signature=Imy4vfZcyh2CQTDlZWbejt93N8tI~HPMuwEucq3VFtQxzjytPUv1KvkzZkebYT~NXnouXjZEF06gqJ1nCnkN8-06A7GO-oGG1wqyidOj7~St6X1pYZ7gRVRWlmx4wc9ja3DVPiswtnJS4t1nuXsAGKCBNVrzkJdSYtUfiXTLyCA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=sa-mp-0-3x-R1-2-install.exe

http://dc592.4shared.com/download/.../sa-mp-03x-R1-2-install.exe

http://download2175.mediafire.com/4g60kvfmd9cg/.../Samp ByKillFailSourse.exe

http://download1811.mediafire.com/idjzegbt23wg/.../sa-mp-0.3x-R1-2-install.exe

http://gsf-cf.softonic.com/563/536/.../file?SD_used=0&channel=WEB&fdh=no&id_file=78075&instance=softonic_br&type=PROGRAM&Expires=1440325023&Signature=Lx9xPJk5oSV59adIVCHdE37j0gnvA4rHVsam7mO-akiedhkqRXcMwFjAobzkguzsAgrpvDKKjhCQDf3gR9t4BtY4cz15q66sDZOPaLpyRaH360S6GfDZGeB5zxFqGGA999hOeCq4KZLxrtgdnr3pNEG025~4f2eys8Azfu~pk6I_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=sa-mp-0-3x-R1-2-install.exe

http://download1466.mediafire.com/35cqszciudng/.../sa-mp-0.3x-R1-2-install.exe

http://download627.mediafire.com/tqnn93ig3umg/.../Samp ByKillFailSourse.exe

Latest 30 of 299 download URLs

Scan sa-mp-0.3x-r1-2-install.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.