home

tibia860.exe

Corp Tibsa

This is a setup program which is used to install the application. The file has been seen being downloaded from www.tibia-client.net.
Product:
Corp Tibsa

Version:
4.2.7.2

MD5:
7c3b3f9fe725acc041a260c2cb4a0505

SHA-1:
59fafcb4a84c2a87326211d6abe703e92334bcd9

SHA-256:
aa97b79187cc76c08f710b694c3a2b1c9961f187c4af2d2478cd8e4ad33f4206

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:49:45 AM UTC  (today)

File size:
24.6 MB (25,780,348 bytes)

Product version:
4.2.7.2

Copyright:
Belkas SA

Trademarks:
Siefnseinf

Original file name:
omesk.exe.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\tibia860.exe

File PE Metadata
Compilation timestamp:
9/8/2007 1:12:13 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
786432:6lV1DzDmk+dZrJ+IWwuD+3Z6M1Jio+gpRop:iXDmT/+IWnD+X6Z

Entry address:
0x5282D

Entry point:
E8, 58, B1, 00, 00, E9, 17, FE, FF, FF, B8, AB, E4, 45, 00, A3, 38, 4E, 47, 00, C7, 05, 3C, 4E, 47, 00, A7, DB, 45, 00, C7, 05, 40, 4E, 47, 00, 65, DB, 45, 00, C7, 05, 44, 4E, 47, 00, 99, DB, 45, 00, C7, 05, 48, 4E, 47, 00, 0F, DB, 45, 00, A3, 4C, 4E, 47, 00, C7, 05, 50, 4E, 47, 00, 25, E4, 45, 00, C7, 05, 54, 4E, 47, 00, 25, DB, 45, 00, C7, 05, 58, 4E, 47, 00, 8F, DA, 45, 00, C7, 05, 5C, 4E, 47, 00, 1E, DA, 45, 00, C3, E8, 9B, FF, FF, FF, E8, 90, BC, 00, 00, 83, 7C, 24, 04, 00, A3, D4, 6A, 47, 00, 74, 05...
 
[+]

Code size:
399 KB (408,576 bytes)

The file tibia860.exe has been seen being distributed by the following URL.

http://www.tibia-client.net/.../tibia860.exe

Scan tibia860.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.