home

nto shippuden 1.4.exe.exe

Tibia Player

CipSoft GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from download1190.mediafire.com.
Publisher:
CipSoft GmbH

Product:
Tibia Player

Version:
8.60

MD5:
3b0cfbf215cfa45b2fb1e28f8a2130ef

SHA-1:
51e64149c758e632dc4f20e656c74b51460def63

SHA-256:
c6ae753203291d27e82d84362ac37f4b76cb475e8f4c7e8ca7f58c6d6cb18657

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:55:16 AM UTC  (today)

File size:
24.8 MB (25,989,069 bytes)

Product version:
8.60

Copyright:
Copyright (C) CipSoft GmbH 2002-2010

Trademarks:
Tibia is a registered Trademark of CipSoft GmbH.

Original file name:
Tibia.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\nto shippuden 1.4.exe.exe

File PE Metadata
Compilation timestamp:
6/29/2010 6:08:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:relnYDIh4e0IzjTfXs9zROc4d4yQoSmOwEMyBPy8h81c5s8KSgNiO7ysB03sJXmU:Q34eVDc9TQQK+ecB5CN9B0s5

Entry address:
0x407B33

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, C0, 76, 01, 6F, D3, 2E, D0, 0C, BF, 24, F9, 02, B9, 0F, E3, 44, 30, 85, 50, C3, E4, 8B, 92, 46, EC, BC, 98, 25, 91, 1E, 8B, 19, 13, 78, 59, 9D, 5C, 57, 09, ED, 1F, D6, 58, 73, 4E, B0, 5D, 8A, 2D, D1, AB, 07, 4B, 3E, DF, 44, 2D, D1, AB, 07, 4B, 3E, DF, 44, E9, 1A, 6D, 00, 00, E9, 2E, 6D, 00, 00, E9, 29, 6D, 00, 00, E8, 6E, FB, FF, FF, 6E, 04, 01, 00, 81, 99, 00, 00, 14, BE, F0, 0F, 0C, 6C, D1, 06, A8, F0, 74, 46, E1, DC, 91, FF, 44, B5, D0, 0D, A4, 94, 69, 15, 85...
 
[+]

Packer / compiler:
MoleBox v2.0

The file nto shippuden 1.4.exe.exe has been seen being distributed by the following URL.

http://download1190.mediafire.com/qafadtwo5ewg/.../NTO Shippuden 1.4.exe.exe

Scan nto shippuden 1.4.exe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.