home

tibia multi-ip changer.exe

MULTI IP Changer

Asprate

This is a setup program which is used to install the application. The file has been seen being downloaded from www.speedyshare.com and multiple other hosts.
Publisher:
Asprate

Product:
MULTI IP Changer

Version:
7.46.0062

MD5:
4505ec35dc42664b86dd3cac8199d4d8

SHA-1:
b3532878202943ab221ebc0cbb318b9829403391

SHA-256:
48077e97abafe0c7c33ab5371416d745e5fe7967b5980ffeb3a1d1150053bdf3

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/23/2024 8:22:47 PM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
TrojWare.Win32.Injector.AGAS
17700

McAfee
Artemis!4505EC35DC42
5600.7231

File size:
316 KB (323,584 bytes)

Product version:
7.46.0062

Copyright:
Asprate© 2004-2009

Original file name:
Tibia MULTI-ip changer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\tibia%20multi-ip%20changer.exe

File PE Metadata
Compilation timestamp:
9/28/2010 12:35:16 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:HNvPL0F21gkDQx5W7f6wvZw8ppcO3BV/br0tGYME0TzJM5qY:qIZzt7XAME03JCq

Entry address:
0x3C90

Entry point:
68, 60, 3F, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 58, 00, 00, 00, 40, 00, 00, 00, D8, 15, 01, 11, 52, 05, 17, 49, 8B, 18, 35, 66, 31, 8B, 6F, A1, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4D, 75, 6C, 74, 69, 49, 50, 43, 68, 61, 6E, 67, 65, 72, 00, 00, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 43, 68, 61, 6E, 67, 65, 73, 20, 49, 50, 00, 00, 00, 00, 00, 01, 00, 10, 00, 14, 9C, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
300 KB (307,200 bytes)

The file tibia multi-ip changer.exe has been discovered within the following programs.

Tibia  by CipSoft GmbH
www.cipsoft.com
About 2% of users remove it
Tibia MULTI-ip changer  by Asprate
About 1% of users remove it
 
Powered by Should I Remove It?

The file tibia multi-ip changer.exe has been seen being distributed by the following 9 URLs.

http://www.speedyshare.com/WZrzf/3c0ae07d/.../Tibia-MULTI-ip-changer.exe

http://www.speedyshare.com/WZrzf/0ea305e7/.../Tibia-MULTI-ip-changer.exe

http://www.speedyshare.com/WZrzf/2ad46c22/.../Tibia-MULTI-ip-changer.exe

http://www.speedyshare.com/WZrzf/801abc74/.../Tibia-MULTI-ip-changer.exe

http://www.speedyshare.com/WZrzf/fc8f9958/.../Tibia-MULTI-ip-changer.exe

http://www.otloader.com/.../Tibia MULTI-ip changer.exe

temp:Ip Changer 8.60.exe

http://www.otchanger.net/.../Tibia MULTI-ip changer.exe

http://www.speedyshare.com/2HW7C/a184b7f4/.../Ip-Changer-8.60.exe

Scan tibia multi-ip changer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.