tibiamc8.60.exe

Tibia Player

CipSoft GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from s6906.chomikuj.pl and multiple other hosts.
Publisher:
CipSoft GmbH

Product:
Tibia Player

Version:
8.60

MD5:
e5ac2d5e6841283777816bc43e6016fd

SHA-1:
2cea04d00ad9e9cf12498e06327c7bace34c1202

SHA-256:
b4cc6ea1e236af9f7f5d670e758a5db1696fa41605da37d20e4a2852a33ce1a6

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/30/2024 7:56:01 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clodc12.Trojan
1.3.0.4959

Norman
Obfuscated_VPE
11.20150725

Trend Micro House Call
HV_ZYX_CB240190.TOMC
7.2.206

File size:
2.3 MB (2,433,024 bytes)

Product version:
8.60

Copyright:
Copyright (C) CipSoft GmbH 2002-2010

Trademarks:
Tibia is a registered Trademark of CipSoft GmbH.

Original file name:
Tibia.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\tibia\tibiamc8.60.exe

File PE Metadata
Compilation timestamp:
6/29/2010 4:38:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
7.10

CTPH (ssdeep):
49152:sH2BHlLfYcpvmE0SukeNfiAD03yy/cP7ijwV/YnDnHW/I8E6qp1aLcD3:sAFLYcv0vfD03yy/cPuFnHW/I8EVaLu3

Entry address:
0x1625EB

Entry point:
6A, 60, 68, 58, A9, 5D, 00, E8, C1, 08, 00, 00, BF, 94, 00, 00, 00, 8B, C7, E8, 7D, D1, FF, FF, 89, 65, E8, 8B, F4, 89, 3E, 56, FF, 15, 14, 82, 5B, 00, 8B, 4E, 10, 89, 0D, 84, 3B, 7E, 00, 8B, 46, 04, A3, 90, 3B, 7E, 00, 8B, 56, 08, 89, 15, 94, 3B, 7E, 00, 8B, 76, 0C, 81, E6, FF, 7F, 00, 00, 89, 35, 88, 3B, 7E, 00, 83, F9, 02, 74, 0C, 81, CE, 00, 80, 00, 00, 89, 35, 88, 3B, 7E, 00, C1, E0, 08, 03, C2, A3, 8C, 3B, 7E, 00, 33, F6, 56, 8B, 3D, A0, 82, 5B, 00, FF, D7, 66, 81, 38, 4D, 5A, 75, 1F, 8B, 48, 3C, 03...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v7.0

Code size:
1.7 MB (1,798,144 bytes)

The file tibiamc8.60.exe has been seen being distributed by the following 30 URLs.

http://s6906.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV3JNJfsSSxc7_CAY_YcpgIikBe2OJhLOGwvRm5DakJSayb6IRhAowhbXp3bj59pgY4fgfnCASRqeRimGQBW7Q_oPvkcJ-RXWX5Objxriw-Hpj8zICocysChMjk7G0i-lmQ&pv=2

http://s6906.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV3JNJfsSSxc7_CAY_YcpgIi7Glf7_5DSCzjUXC3rPxv8Xm6oWzKz0vndQjgPbECir9qfso-AMbEzV6y1ztzUkM0TDoqtaHM7ZJgbmNUckVc0BdgfVj6qhB7HcYlERELPiQ&pv=2

http://s10209.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV8qg2c0Muj9ImXwP-8mQ6gfBeHMBo2es7LagAEWlK7Uw6BCLd4mogysnyzElxIEligyHet9du0YBnp3m6zNSBqPJXxJ4iB00f-wlZu-VjhPaersPrSyzgkHsxsb4MB6W0Q&pv=2

http://download1580.mediafire.com/tutj1vyujung/.../TibiaMC8.6.exe

http://s6906.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV3JNJfsSSxc7_CAY_YcpgIhLzWOsgs3cCaUC22xqUB30ONDWUu_6wsdURDayPkKA4jnoOQVqw4KJzpA-0mMr3QEMcsb362SFMu4DK46ddMJW9O8BLBXehmLl8FGkGyrCIg&pv=2

http://download1754.mediafire.com/mgp9b4u6saeg/.../TibiaMC8.6.exe

http://s6906.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV3JNJfsSSxc7_CAY_YcpgIj4lyc0E1hk6gVnqQ-CS4iFw-eiroCfhuCjARmYv-gXmIO2KYCdi-Cdow6CSa5pqCagiGTJEIWASjnvlt2_MKAOtfdrQGoCLkH_UwZ_6co9zQ&pv=2

http://download1580.mediafire.com/9726mn138mqg/.../TibiaMC8.6.exe

http://s6906.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV3JNJfsSSxc7_CAY_YcpgIh0KyeqE0UFbQP6sme_AwfiivSmJrGAMQOXPmGtOZleTTP-5_lKNvMZ8gNz7VuKOCxcVdT2EJjwRee3SkUkSBfdZ3D45_3-g6hai8wU_AKkLg&pv=2

http://fileshare1180.depositfiles.org/auth-1477238615a41cdf2e1c7a9e600fedb7-186.188.82.113-19180161-54882498-guest/.../TibiaMC8.60.exe

http://s6906.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbVyPTVIVgxJy1HBL0Y_BBfz3PGa9tW8vdYL2cosJHMlynJsbyxiRUeyDi6zYLutnDJRCKo_rSPN-zzftZCtMnhuNlUTm1i0Ta_6bR0W-e6GHCQnqpwThc7HdYKUdM9mNVDA&pv=2

http://s10209.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV9cyy90yBF0Kr_69_O0zGw7UpUb2MI0gzgIHXGxIY5_IzMgGZ_SE1XQsd8DCJymz3I3FxvvENpen46XUaxp46xFcp2a3spUy6Fzo4plcKZWHkb5B-pd-LHyAjn-dqkWafA&pv=2

http://s10209.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV9k7Qx8UttQWYyoasu5L0gJsizui4n74s5OXlIUkVfWsXU8fViZxCPdwwlZUMn3Vvr9HllpyZw9nW_EWBDGU0ELNY98YEgXNv961BrE63ySFvydd3I9bwr0S2NkAHqALmA&pv=2

http://download1580.mediafire.com/x4dclvew25ig/.../TibiaMC8.6.exe

http://download1272.mediafire.com/qr7wyqho5zfg/.../TibiaMC8.6.exe

http://download1661.mediafire.com/qhqhcp94ocag/.../TibiaMC8.6.exe

http://download1754.mediafire.com/axba8cs5p4vg/.../TibiaMC8.6.exe

http://s6906.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbVyPTVIVgxJy1HBL0Y_BBfz3m_li_o_ywVjGIYB8t-Yz0VVtMssWeBvW7SIaBIsxvlpSoaTAa9uPnjfQg-PhhV_9sFusmehgbzzX5GukioGZv0TcY_E7esS1Xt0Cua0P1Cg&pv=2

http://s6906.chomikuj.pl/File.aspx?e=jup9kbYwsyRH1dcfzGmbV4iautr2HH4wtX1DWoz3bgNiCUCjf4Gf2lI_AeG6bOi64lMWPT_FEKyF6uhVa85hkS2Nk9CM7kLnxI9rSWq48QkjFy4QlI-NBqKzJsxzNqCo60IskMwmcZyB4I7iUT7vuw&pv=2

http://download1273.mediafire.com/2pp7nb7r6nrg/.../TibiaMC8.6.exe

Latest 30 of 30 download URLs

Scan tibiamc8.60.exe - Powered by Reason Core Security