home

mb_warband_setup_1153.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from docs.google.com and multiple other hosts.
MD5:
f55849b0526ab2b843c80c9cdb53d5c2

SHA-1:
e5789abf8c275189e027b104329c57cc6d20f2d4

SHA-256:
8de44274459830d9c5f6d99869c66721f88cd9628fdbcbf39816c14244cf061e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 5:31:22 AM UTC  (today)

File size:
586.5 MB (615,036,714 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\mb_warband_setup_1153.exe

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12582912:VUVasd1AzQD9LqHuLGhALKU5gFyjbqDd9dtSUCB595h6nEmtgp8rWaCniwFiM4FI:Itd1AzSDKRFYy/C/9/ATgp8s3iM0R2

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9882

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file mb_warband_setup_1153.exe has been seen being distributed by the following 50 URLs.

https://docs.google.com/uc?export=download&confirm=Owp0&id=0B49DX8lUIAtrMjRqWXIzSU5ZcEE

http://download.taleworlds.com/cdn-cgi/l/.../zS5X8aGQd&jschl_answer=5183

http://download.taleworlds.com/cdn-cgi/l/.../ouik&jschl_answer=8381

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=aef80557f2a83feac8608be8574e9904&pass=1484737989.772-MOr884DdHk&jschl_answer=5528

http://data2.stahnu.cz/downloadFile.php?n=bW91bnQtYmxhZGUtd2FyYmFuZF8xLjE1My5leGU=&s=ueetpq6i5mpe24ijveqpk2u0g5&r=ba9964c6ffec8306f9cbab693bc7bfcd

http://download.taleworlds.com/cdn-cgi/l/.../hdxkfW&jschl_answer=82

http://download.taleworlds.com/cdn-cgi/l/.../KwdE&jschl_answer=2182378

http://i.download.idg.pl/fannef/05ed660a2e6803f58cf8041c6db69e68/5803a6fd//cyberjoy/pelnewersje/m/.../mb_warband_setup_1153(1).exe

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=580b8d242fd51fbb17f2f57a91dc3dd3&pass=1479064621.585-KZIeE9HzPC&jschl_answer=10292

http://data2.stiahnut.sk/downloadFile.php?n=bW91bnQtYmxhZGUtd2FyYmFuZF8xLjE1My5leGU=&s=f2ag5t6q0b4ndcp5djljv34bh4&r=88226ae7ae964333b88f79166e2ff182

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=9a27dbf21a9b375a2696bdc9bec3f476&pass=1482500263.922-7ShP5ts RR&jschl_answer=20734

https://docs.google.com/uc?export=download&confirm=PAc_&id=0B49DX8lUIAtrMjRqWXIzSU5ZcEE

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=67bc5d4e94785d2f6f568e0d6a3c2e0f&pass=1480944251.885-7sTrSo Jay&jschl_answer=563

https://docs.google.com/uc?export=download&confirm=f7Kz&id=0B49DX8lUIAtrMjRqWXIzSU5ZcEE

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=a38bf81405effefa781bb26a6d34b7ef&pass=1480175504.245-GwV lZwfNf&jschl_answer=5231

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=f0f99a19eca6fc487305f57d02ce9780&pass=1477309804.099-NovAPSaURd&jschl_answer=6665

https://docs.google.com/uc?export=download&confirm=cc_6&id=0B49DX8lUIAtrMjRqWXIzSU5ZcEE

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=627ed9164d3c6bd0e11b6914b39c69ce&pass=1474917376.791-euAdY3g 5X&jschl_answer=50

http://i.download.idg.pl/fannef/dba3bc15963357ec2bee90044847330d/57403fca//cyberjoy/pelnewersje/m/.../mb_warband_setup_1153(1).exe

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=d26da577254b508f4e841a9632d072bd&pass=1478808030.984-pwsKVs laM&jschl_answer=-460

https://docs.google.com/uc?export=download&confirm=ndWC&id=0B49DX8lUIAtrMjRqWXIzSU5ZcEE

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=137f13a5f029d880c4731167995c3b3e&pass=1479478058.356-Rx3htVdKun&jschl_answer=-589

http://data2.stahnu.cz/downloadFile.php?n=bW91bnQtYmxhZGUtd2FyYmFuZF8xLjE1My5leGU=&s=47a6jutmm9pg2kqmitkf3tne34&r=c1a415d62c8cc3945baf4d81325e7669

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=da112bf8137944cf9712daa7428bb7c5&pass=1479630548.669-u0ZkTHTPK1&jschl_answer=1498

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=afb26ff98d3d0805ea6c105673138547&pass=1479306989.151-OXYoxakvqX&jschl_answer=7887004

https://docs.google.com/uc?export=download&confirm=95Sm&id=0B49DX8lUIAtrMjRqWXIzSU5ZcEE

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=d9224ca701f53dcc412712b83b6812a9&pass=1481595447.407-JBJgOonTln&jschl_answer=80

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=a806a8feb618b338255ac21e6fe96beb&pass=1477408946.277-ta2ml27cWw&jschl_answer=-116799

http://mount-blade.fr.softonic.com/download-tracker?th=1/.../f5MJg4acfD1hVcOzuAm2jEKd7xNvRsIgYRYjl5WdpDaGrPpvN44=

https://docs.google.com/uc?export=download&confirm=CqoP&id=0B49DX8lUIAtrMjRqWXIzSU5ZcEE

Latest 30 of 56 download URLs

Scan mb_warband_setup_1153.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.