home

Tibia MULTI-ip changer.exe

MULTI IP Changer

Asprate

This is a setup program which is used to install the application. The file has been seen being downloaded from s10203.chomikuj.pl and multiple other hosts.
Publisher:
Asprate

Product:
MULTI IP Changer

Version:
7.42.0051

MD5:
0ba5a358be7a35933bfb1e930912ccfe

SHA-1:
bb90dc0119385931514914bccf734d97c6d92480

SHA-256:
eac1bb25528a91270355c755623ecd7fbfdc675f62f5b7cd29bf5f24232d2a53

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/17/2024 12:42:52 PM UTC  (today)

Scan engine
Detection
Engine version

Quick Heal
(Suspicious) - DNAScan
2.16.12.00

Trend Micro House Call
GRAY_Gen
7.2.48

Trend Micro
GRAY_Gen
10.465.17

File size:
280 KB (286,720 bytes)

Product version:
7.42.0051

Copyright:
Asprate© 2004-2008

Original file name:
Tibia MULTI-ip changer.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\tibia multi-ip changer.exe

File PE Metadata
Compilation timestamp:
5/19/2008 12:48:23 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:SJZMX0zsSgb/GtCNDQfY4081kwiaqyOmcNC8JE6Ech+0jmcmlnNPPDAyxehk61K8:SX/klAzdGhk6KN

Entry address:
0x354C

Entry point:
68, 28, 38, 40, 00, E8, EE, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 68, 00, 00, 00, 40, 00, 00, 00, 5B, 2C, 9A, 36, 47, 8D, 75, 4C, B6, A1, 91, F9, F7, B5, 35, 8C, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 4D, 75, 6C, 74, 69, 49, 50, 43, 68, 61, 6E, 67, 65, 72, 00, 00, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 43, 68, 61, 6E, 67, 65, 73, 20, 49, 50, 20, 69, 6E, 20, 74, 69, 62, 69, 61, 2E, 65, 78, 65, 21, 00, 00, 00, 00, 00, 00, 00, 01, 00, 10, 00, 00, 93, 40, 00...
 
[+]

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
264 KB (270,336 bytes)

The file Tibia MULTI-ip changer.exe has been seen being distributed by the following 2 URLs.

http://s10203.chomikuj.pl/File.aspx?e=acfXJsabAZvpbZwTOkC7XqBDZRlg-s3LmSEsBL2GHgO1hMWhLuF1lUukUk6AiQa9Jb-25sBXMN4P6f7WgHzxgowSrJQkbIwW_c1QK4aZgGGE4bPL_DrVnHOtw5adlgW0odDVoUmDLIeRFINu8IqcUA&pv=2

http://s10203.chomikuj.pl/File.aspx?e=acfXJsabAZvpbZwTOkC7XkClz1ndEEWCWSRdHa5a4XguDPSeHIIzTdECoW43cce51DsH2mGGLTMLL_SdGLoLkvMT6XFP9FziK_nM5Hvl-j1_sLztoiiTETQzOvlJRJVffv0Zk51xe3tDD9I-amWQxQ&pv=2

Scan Tibia MULTI-ip changer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.