tibia76_unidownload.com.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from clients.halfaway.net and multiple other hosts.
MD5:
22d03f670b5e8b4a253f339649331e26

SHA-1:
37929c8c86ee4201daef524dd00af5ee71bd0b0c

SHA-256:
45ca8941d69724f707547652c97b90865ca261d893faba497e18e2ac7756ba22

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/23/2024 11:05:44 AM UTC  (today)

Scan engine
Detection
Engine version

Trend Micro House Call
Suspicious_GEN.F47V0415
7.2.168

File size:
9.5 MB (9,924,115 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\tibia76_unidownload.com.exe

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
196608:3D0xCbdeanNxy7FUTG/X9eWvhQEY2r7arOrXgFg5smYtzLs1uJOWbE:AYbU+HyJeG/t3pQIrurOXGg5wtsWTg

Entry address:
0xBED8

Entry point:
55, 8B, EC, 83, C4, B8, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, BC, 89, 45, B8, E8, 73, 71, FF, FF, E8, DA, 85, FF, FF, E8, 81, A7, FF, FF, E8, C8, A7, FF, FF, E8, B7, A8, FF, FF, E8, 36, F5, FF, FF, E8, F1, FA, FF, FF, BE, 04, FF, 40, 00, 33, C0, 55, 68, E9, C4, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, A8, C4, 40, 00, 64, FF, 32, 64, 89, 22, 8D, 55, F0, 33, C0, E8, 7A, F2, FF, FF, 8B, 55, F0, B8, 68, FC, 40, 00, E8, 29, 72, FF, FF, 8B, 15, 68, FC, 40, 00, B8, 6C, FC, 40, 00, E8, FE, 7B, FF, FF, C6...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
45.5 KB (46,592 bytes)

The file tibia76_unidownload.com.exe has been seen being distributed by the following 18 URLs.

http://clients.halfaway.net/windows.php?tibia=76

http://clients.tibiaking.com/download/.../760

https://docs.google.com/uc?authuser=0&id=0B1YnteimFYG1UUkzVnJLaldJMFU&export=download

https://docs.google.com/uc?authuser=0&id=0B0pq2teLaXtYam1pem1mWnBwb1k&export=download

https://remeresmapeditor.com/rmedl.php?file=tibia76.exe

http://downloads.otserv.com.br/.../tibia76.exe

https://doc-0g-68-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/sa2p3qgp69aehsrfu4fk0vc7kf74600t/1468879200000/02199952690202325814/.../0B0pq2teLaXtYam1pem1mWnBwb1k?e=download

http://fra-7m17-stor03.uploaded.net/.../19305e91-36af-4bf1-ae97-1b53a232a8a2

Scan tibia76_unidownload.com.exe - Powered by Reason Core Security