home

ntoextreme1.3.exe

Tibia Player

CipSoft GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from download1253.mediafire.com.
Publisher:
CipSoft GmbH

Product:
Tibia Player

Version:
8.60

MD5:
d845d841c21e3b9f2b06845b1c4f72d4

SHA-1:
f7559faa2c1eec39a8fe59316f62d1838ebf8a31

SHA-256:
34e672707b4961b7b88c08fd00798d9752d5fc2fefebec5be0e6823df522b559

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/25/2024 6:13:29 PM UTC  (today)

File size:
30 MB (31,425,804 bytes)

Product version:
8.60

Copyright:
Copyright (C) CipSoft GmbH 2002-2010

Trademarks:
Tibia is a registered Trademark of CipSoft GmbH.

Original file name:
Tibia.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ntoextreme1.3.exe

File PE Metadata
Compilation timestamp:
6/29/2010 6:08:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:Y98htaUJ8poCwskPY2Cv8v8bWiriXCb/CFEKaLi2n:YmWcPY2atWzXCjC4Li2n

Entry address:
0x3FBB33

Entry point:
F2, 81, F0, 3C, 7B, 41, 02, FF, C3, 80, D7, 0A, 40, 0F, AF, ED, 51, 39, EB, 88, C9, 80, D1, B9, B3, 80, 85, D9, E8, 30, 00, 00, 00, 81, FA, 32, AC, 00, 00, 71, 0B, 30, DB, 80, FD, 79, F7, C2, 39, 86, C5, B6, F6, C6, 11, 41, 2B, FF, FF, C5, 88, EB, C6, C7, 54, 03, FA, 69, C5, 30, 3B, CE, AB, FE, C4, 81, CD, 05, BC, CC, F9, 88, DC, 80, CA, 5D, 85, FF, 74, 02, 31, C0, 8A, C9, 81, FB, 21, 36, 00, 00, 59, 85, D5, 2B, C6, 0F, AF, DF, 68, 59, 16, 38, 00, FE, CA, 89, F7, 3A, E7, 85, C9, 75, 02, 88, CE, 86, D4, 10...
 
[+]

The file ntoextreme1.3.exe has been seen being distributed by the following URL.

http://download1253.mediafire.com/daspd6vv8yng/.../NtoExtreme1.3.exe

Scan ntoextreme1.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.