home

tibia1090.exe

Tibia

CipSoft GmbH

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from docs.google.com and multiple other hosts.
Publisher:
CipSoft GmbH

Product:
Tibia

Description:
Tibia 1090

Version:
10.90

MD5:
ea858cc162546a6b0485e065e4ea0068

SHA-1:
9a23f1d39c1f01321d2bed19d68d69e2cc2a4546

SHA-256:
a1ad3278d08f1b5616e090fd06ad3fb2e77c650823dd2951a2c0aa20b7f0c8ec

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 9:21:32 PM UTC  (today)

File size:
32.3 MB (33,893,591 bytes)

Product version:
10.90

Copyright:
CipSoft GmbH

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\tibia1090.exe

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
786432:aYNKNpoCe+KEwoY/UZyGRbO1DM83d+I7ahDuRoKJSCI39gymZi:aYkpG2TY/UZyGRq1DVlOhC2QIe4

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Entropy:
8.0000

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file tibia1090.exe has been seen being distributed by the following 50 URLs.

https://docs.google.com/uc?export=download&confirm=WPuc&id=0B0pq2teLaXtYSkJIbUhaZEY5aWc

https://docs.google.com/uc?export=download&confirm=unuV&id=0B0pq2teLaXtYSkJIbUhaZEY5aWc

https://docs.google.com/uc?export=download&confirm=UNUP&id=0B0pq2teLaXtYSkJIbUhaZEY5aWc

http://am4-r1f4-stor08.uploaded.net/.../796d606a-e4ae-4f8f-b85f-af1ea2d93364

http://www.wartibia.com/tibia1090.exe

http://am4-r1f4-stor08.uploaded.net/.../1f124894-9173-415e-bc8a-4ddb02dc7d9d

http://am4-r1f4-stor08.uploaded.net/.../ea1a33d7-06d9-4de0-a1ee-feb77e25b4b3

http://am4-r1f4-stor08.uploaded.net/.../b7823cb3-df01-438f-b7e4-f8e60ceb58f1

http://am4-r1f4-stor08.uploaded.net/.../682c0193-eaef-41db-a6f3-e0552b37ed73

http://am4-r1f4-stor08.uploaded.net/.../f0c868bb-5038-4780-a696-43e3ec868d1f

https://docs.google.com/uc?export=download&confirm=kI6l&id=0B0pq2teLaXtYSkJIbUhaZEY5aWc

http://am4-r1f4-stor08.uploaded.net/.../afca0054-e908-4f70-a9d6-6a6a784d8777

http://am4-r1f4-stor08.uploaded.net/.../b62ef53a-ca6b-4dbc-b1c8-7a7b0209a306

https://docs.google.com/uc?export=download&confirm=uZH4&id=0B0pq2teLaXtYSkJIbUhaZEY5aWc

http://am4-r1f4-stor08.uploaded.net/.../c5b0b983-1160-4016-8ab5-ce4855adf20c

http://am4-r1f4-stor08.uploaded.net/.../0117943d-53b3-45d8-b753-e129dfadf66c

http://www.warzovia.com/.../tibia1090.exe

http://am4-r1f4-stor08.uploaded.net/.../ecb84571-de40-47a2-98d9-922918492097

http://am4-r1f4-stor08.uploaded.net/.../5ff79e56-5492-4cd6-b83a-3dfecc8335d8

http://download1513.mediafire.com/l60sas49ifxg/.../tibia1090.exe

http://tibia.dekagames.com.br:8080/.../tibia1090.exe

https://docs.google.com/uc?export=download&confirm=Nw6t&id=0B0pq2teLaXtYSkJIbUhaZEY5aWc

http://am4-r1f4-stor08.uploaded.net/.../e7a3b9c5-47bf-499b-a9c1-f8f7e0be1eee

http://download.tibia.com/tibia963.exe

http://download1942.mediafire.com/tutdhmsvtfdg/.../tibia1090.exe

https://docs.google.com/uc?export=download&confirm=JJ9U&id=0B0pq2teLaXtYSkJIbUhaZEY5aWc

https://docs.google.com/uc?export=download&confirm=91GE&id=0B0pq2teLaXtYSkJIbUhaZEY5aWc

http://wantedglobal.com:8090/.../tibia1090.exe

http://am4-r1f4-stor08.uploaded.net/.../10d2f4d1-7ec9-4cb0-a698-6c1675b1d6a0

http://am4-r1f4-stor08.uploaded.net/.../4137be48-7d80-493b-bffd-bba2cc26d93c

Latest 30 of 130 download URLs

Scan tibia1090.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.