home

ntoextreme1.3.exe

Tibia Player

CipSoft GmbH

This is a setup program which is used to install the application. The file has been seen being downloaded from download1775.mediafire.com.
Publisher:
CipSoft GmbH

Product:
Tibia Player

Version:
8.60

MD5:
3a858e38db39940baa26f770e73705b0

SHA-1:
265753837b75a9bce64bd785997070edf56f90be

SHA-256:
028e303a26654ed79aefd1adce16ffe2b9754a17a4228cc33abf5bee716b5846

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 10:05:45 PM UTC  (today)

File size:
1.2 MB (1,290,240 bytes)

Product version:
8.60

Copyright:
Copyright (C) CipSoft GmbH 2002-2010

Trademarks:
Tibia is a registered Trademark of CipSoft GmbH.

Original file name:
Tibia.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\ntoextreme1.3.exe

File PE Metadata
Compilation timestamp:
6/29/2010 6:08:59 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:fi0zsT0Ah+qIATMwrfmgN8G1GeZE3X3VT7fFwUL3wjtMH1VDQ1stSvB82VE/6:K4k82gwrfmgN51JZonVPFL3whMH1VDwH

Entry address:
0x3FBB33

Entry point:
21, CF, 8D, 3D, 4A, C6, 72, 86, 8A, E4, 2D, 43, 0E, 0B, 80, 88, CF, 0F, BE, E9, 0F, B7, F3, 00, F8, 8D, 2D, D1, 65, 90, E2, 3C, E7, 8D, 35, 61, 4D, F0, B1, 0F, BF, EA, 39, D7, 0F, B6, C6, 87, FE, 81, FE, F4, 3B, 3A, 5F, 2B, ED, 74, 0E, 85, CD, C7, C0, 45, F6, E3, 22, 81, E6, 08, DE, 05, 4F, 81, ED, 0A, BB, FF, FF, 85, FB, 70, 03, 46, 8B, F5, 81, F5, 13, 09, 00, 00, 8D, 3D, 0F, 31, 82, C6, 0F, AF, FF, 8B, FB, 8D, 4D, 00, 04, 55, 80, C8, 2E, 47, 3B, D7, 73, 04, FE, C0, 84, C4, 8B, D9, 69, C0, 13, E3, E9, CA...
 
[+]

The file ntoextreme1.3.exe has been seen being distributed by the following URL.

http://download1775.mediafire.com/25clrv7yd3vg/.../NtoExtreme1.3.exe

Scan ntoextreme1.3.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.