home

rts.exe

Tibia Player

CipSoft GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from www23.zippyshare.com.
Publisher:
CipSoft GmbH

Product:
Tibia Player

Version:
8.54

MD5:
e764c0259db14d3a5e570deb6c9812a1

SHA-1:
733f181865acf26c6d2bc60a13da45f4ab977be0

SHA-256:
b09aecbb1d8291a32ed2ca73d662607f0e992a2bb011bc6f27b9ed9bd5dddf69

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/24/2024 11:24:38 PM UTC  (a few moments ago)

File size:
19.7 MB (20,698,226 bytes)

Product version:
8.54

Copyright:
Copyright (C) CipSoft GmbH 2002-2009

Trademarks:
Tibia is a registered Trademark of CipSoft GmbH.

Original file name:
Tibia.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\rts.exe

File PE Metadata
Compilation timestamp:
12/8/2009 10:45:51 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
393216:TtwKfssrPnJuBF0Hhe52p3pNDV6V3+und/SLWVrbD37nPqYbP4T9W:JweRuQA52p3Dxxud/SyF337CBw

Entry address:
0x412B33

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, C5, 10, 03, 94, B2, DF, B7, FD, 29, 77, A6, A2, BA, D3, 92, BE, E3, 05, 4D, 5E, 44, 60, 60, 95, 75, 68, 24, EF, C6, 1C, 68, 82, 9D, E1, 55, 9D, F0, 8E, 87, DA, CD, 81, 55, 96, A5, 88, D4, 57, BA, 96, B5, 3F, E9, FB, D8, B2, BA, 96, B5, 3F, E9, FB, D8, B2, E9, 1A, 6D, 00, 00, E9, 2E, 6D, 00, 00, E9, 29, 6D, 00, 00, E8, 6E, FB, FF, FF, 6E, 04, 01, 00, 83, 99, 00, 00, E5, 13, 35, 1B, E3, 12, D1, D6, 5D, B0, 74, D6, A7, 95, 91, 2F, 08, 86, D0, 3D, E4, 5A, 69, E5, 25...
 
[+]

Packer / compiler:
MoleBox v2.0

The file rts.exe has been seen being distributed by the following URL.

http://www23.zippyshare.com/d/Wbf2wraR/.../RTS.exe

Scan rts.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.