nto advanced 0.8 limpo.exe

Tibia Player

CipSoft GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from download955.mediafire.com and multiple other hosts.
Publisher:
CipSoft GmbH

Product:
Tibia Player

Version:
8.60

MD5:
5e32d83d127422dc22d3e27d2acb314d

SHA-1:
36b66b3afbec3dcf696c093cf10719161a0215b3

SHA-256:
ccd1ff7a2d8df13332608c535d00f4d914e6169cdb6c7301434857db8e7906f9

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 6:14:42 PM UTC  (today)

File size:
19.1 MB (20,050,757 bytes)

Product version:
8.60

Copyright:
Copyright (C) CipSoft GmbH 2002-2010

Trademarks:
Tibia is a registered Trademark of CipSoft GmbH.

Original file name:
Tibia.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\nto advanced 0.8 limpo.exe

File PE Metadata
Compilation timestamp:
6/29/2010 6:08:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:UcTJmcmHMXE11GjTaowQv2nklWXGn1fDm8VxyQPAzjoUXqOd9RpJNIbQiei0wLQ:Ucc5OaY6klW21rmlQPAfTXqOdOfl1Q

Entry address:
0x448B33

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, 48, F8, D3, 5F, FA, 56, F4, 41, CD, DC, B8, 16, 71, 71, 09, 83, EB, 28, 0E, 6E, A2, 49, F8, FD, 39, 60, 40, C0, 6E, C5, 7F, 2B, A6, 08, CF, 33, BF, 02, 54, C4, 2A, DD, 15, 2D, 6A, A8, 18, 0C, DF, D2, A0, F2, F9, 47, 12, 86, DF, D2, A0, F2, F9, 47, 12, 86, E9, 1A, 6D, 00, 00, E9, 2E, 6D, 00, 00, E9, 29, 6D, 00, 00, E8, 6E, FB, FF, FF, 6E, 04, 01, 00, 82, 99, 00, 00, AB, 15, 08, 80, 77, 5D, D1, 76, 17, E9, 74, B6, FE, 19, 91, 8F, 87, 70, D0, 5D, A2, 8E, 69, 85, 15...
 
[+]

Packer / compiler:
MoleBox v2.0

The file nto advanced 0.8 limpo.exe has been seen being distributed by the following 3 URLs.

http://download955.mediafire.com/hyg8e235dbtg/.../Nto Advanced 0.8 Limpo.exe

Scan nto advanced 0.8 limpo.exe - Powered by Reason Core Security