home

tibia854.exe

CipSoft GmbH

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from s6035.chomikuj.pl and multiple other hosts.
Publisher:
CipSoft GmbH

Description:
Tibia Player 854

Version:
8.54

MD5:
003fa5aabb86673fb1aa7ac9ad46bcdf

SHA-1:
3bc911fef67b151085ff1f1e785e7446a1785ed4

SHA-256:
744c5add95cab2a29099facdda8d8c05e0a1e2060a9bf8b9887252817154df29

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/4/2024 5:10:58 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clod538.Trojan
1.3.0.4959

File size:
21.4 MB (22,466,072 bytes)

Copyright:
CipSoft GmbH

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\tibia854.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:y7856xKYfwRpiZEjNC1aLI373ASlLzk68zZyfwkjUBVi7DID0:y7aupCiZEjMr3LBxOVi7Do0

Entry address:
0x98D8

Entry point:
55, 8B, EC, 83, C4, CC, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, EE, 97, FF, FF, E8, F5, A9, FF, FF, E8, 20, CC, FF, FF, E8, 67, CC, FF, FF, E8, 0A, F3, FF, FF, E8, 71, F4, FF, FF, 33, C0, 55, 68, 82, 9F, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 38, 9F, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, B0, 40, 00, E8, 9B, FE, FF, FF, E8, 26, FA, FF, FF, 8D, 55, F0, 33, C0, E8, E0, D0, FF, FF, 8B, 55, F0, B8, D4, BD, 40, 00, E8, 9F, 98, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, D4, BD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36 KB (36,864 bytes)

The file tibia854.exe has been seen being distributed by the following 27 URLs.

http://s6035.chomikuj.pl/File.aspx?e=aNZ4pGJdt4vRWFsjIjrLRyMIrx6AD0N3nrsZY3YhDDNrXwIovug3d1wr4GMcZF9t1iM8khrmU1Cx9Rp1UcZ5s2w4MrpO5E7w4TYk58xQB5v2TOpCWKu0oV7Hr7B9khApWAlkLd6rnMF7FjRy2aBWoA&pv=2

http://s6035.chomikuj.pl/File.aspx?e=aNZ4pGJdt4vRWFsjIjrLR4Y4lOl4kj2pVwN6XfXVgrKZNOZNLJLGnfC7x4KepPjke-mwFPmzpBDg6zdLRaOIJ233TK-dUJs4qsmEQFPzDdYNE6IWkaS91wIhQ4B1kAKh2vJta93I2T-Y1c0yDdlLSQ&pv=2

http://www119.zippyshare.com/d/nqeLOHkX/.../Klient Tibii 8.54.exe

https://otchecker.com/?smd_process_download=1&download_id=385

http://down2.baixe.net/3/.../tibia854.exe

http://www.tibiavenezuela.com/descargar.php?id=24

https://remeresmapeditor.com/rmedl.php?file=tibia854.exe

http://www119.zippyshare.com/d/nqeLOHkX/.../Klient Tibii 8.54.exe

http://dc161.4shared.com/download/.../Tibia_854.exe

http://www119.zippyshare.com/d/nqeLOHkX/.../Klient Tibii 8.54.exe

https://mega.nz/temporary/.../Tc8WFZ6K

http://tibiaclient.otslist.eu/getfile/.../tibia854.exe

http://ots-list.org/download/.../tibia854.exe

http://s10244.chomikuj.pl/File.aspx?e=aNZ4pGJdt4vRWFsjIjrLRyMIrx6AD0N3nrsZY3YhDDM6QVBbj6IeXZ6rmfTHdNfel1IzqdpA363I-hLeMm0SfzuubCdEk_D49ilPzUL6LThOneC7SEpUOGilU3HqkTUPk-LJUUIMalPCFEMdb-RvoQ&pv=2

http://tibiaclient.otslist.eu/getfile/.../tibia854.exe

http://tibiamulticlient.com/.../tibia854.exe

http://tibiaclient.otslist.eu/getfile/.../tibia854.exe

http://www.tibia-client.net/.../tibia854.exe

https://docs.google.com/uc?authuser=0&id=0B1YnteimFYG1cHZMcUM2WUFMZTQ&export=download

http://s10244.chomikuj.pl/File.aspx?e=aNZ4pGJdt4vRWFsjIjrLRyMIrx6AD0N3nrsZY3YhDDOAPXYM1NElWysGgv2RlJXFxjaHKtK03xtVab-M5fDtIEnyX8PCTYaNwreYIEirN6dhrsa6GYJq9450262uUZxGeibmgSmlfN5aqmSdhRdjfw&pv=2

http://downloads.tibiabr.com/.../tibia854.exe

http://dc161.4shared.com/download/.../tibia854.exe

http://dc345.4shared.com/download/.../tibia854.exe

http://www.otibia.com/downloads/.../tibia854.exe

http://s10244.chomikuj.pl/File.aspx?e=aNZ4pGJdt4vRWFsjIjrLRyMIrx6AD0N3nrsZY3YhDDOFpUZ43iz66swmopjlU32mYwTCr4kDl1DKu8MQyGySLfQLArTVfnE9Ni5GmR6SMwjk0NgdDpkQvKSTu0W7Fi9BAOu75qu0xH2r8wa8RF3RjQ&pv=2

http://remeresmapeditor.com//files/.../tibia854.exe

http://remeresmapeditor.com/rmedl.php?file=tibia854.exe

Scan tibia854.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.