home

mb_warband_setup_1168.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download2.taleworlds.com and multiple other hosts.
MD5:
4ecd0e5daf19daf5c3bfa88c747203db

SHA-1:
595c57b318ac8e5e5f984418d4753cdf9642da0d

SHA-256:
eca61c5e58b11b8f86f1d612b0e84c06a926511d179cce6342e00b61465a12a8

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 3:25:03 PM UTC  (today)

File size:
581.5 MB (609,752,360 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\mb_warband_setup_1168.exe

File PE Metadata
Compilation timestamp:
2/24/2012 11:20:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12582912:fVasR1kQD9LqHuLGhALKU5gFyjbqDd9dtSUCtvQn6u595hNQImUmSgt8ki6HMdiT:9tR1kSDKRFYy/Ct09/yCmSWHiiRAUz

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.9880

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

The file mb_warband_setup_1168.exe has been seen being distributed by the following 50 URLs.

http://download2.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=4d2fe81bd05bdc8eefc4539bffb29ba3&pass=1484328374.293-mkk4AnzbqX&jschl_answer=6989

http://download2.taleworlds.com/cdn-cgi/l/.../OGjeKFTG9&jschl_answer=2088

https://mega.nz/persistent/.../7JoXiSRD

http://indir.gezginler.net/i/5997/.../

http://indir.gezginler.net/i/5997/.../

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=3ca5995fd4d18f9bffdded763aba74bb&pass=1485167048.48-krir4QoL4b&jschl_answer=43

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=ca307f941597f02c9662d519bce46a16&pass=1477163751.59-45 EcVP5A0&jschl_answer=91

http://download2.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=80504b79e02d6c72cf482217e6369498&pass=1480098655.79-ItXPe35Bp9&jschl_answer=144

http://download.taleworlds.com/cdn-cgi/l/chk_jschl?jschl_vc=42c43f27cf87276807c157d76f97d771&pass=1479958429.845-4O/.../w4Tu&jschl_answer=1143

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=17e8422c715be869b62a0f012a24e65a&pass=1485533638.275-KTsVSE nXE&jschl_answer=1732355

http://download2.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=2ce1622adfd6e0d16eb6daf2f041e948&pass=1476753598.47-B7ACBRRIms&jschl_answer=14848

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=bf851df76fa3fe35b01e17b3c2ed37ac&pass=1482180808.082-ohvyut9K8Q&jschl_answer=92333

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=6f9c31c842b17a9315d304bcf78ad9c6&pass=1484331184.571-csE3OMznhX&jschl_answer=-647

http://download2.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=3b8fa8edc4d4c710f8d02dc8110be579&pass=1477823995.216-QmK2o3d Ql&jschl_answer=-1256053

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=40e6440539686eca523ff9f044da4b2f&pass=1483037097.646-XWGEtkLx3a&jschl_answer=221

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=322c5797dccd0c360801546094ab78be&pass=1478962707.372-RP4TzO 5Ca&jschl_answer=-17

http://indir.gezginler.net/i/5997/.../

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=2fb26bdc38dfccd1c2e326f818d9fe1f&pass=1475185479.439-6ZNmP9p8Ia&jschl_answer=443

http://indir.gezginler.net/i/5997/.../

http://download2.taleworlds.com/cdn-cgi/l/.../7H&jschl_answer=111

http://download2.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=4d11fe199adcef9701e30b801de85013&pass=1480881875.834-3XWXdJRIQa&jschl_answer=568

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=7deb7eb4ddbd35a2e88e103dda94150b&pass=1486809879.883-rrzFaCfsUl&jschl_answer=951221

http://download2.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=e72272e86d9b47481456723ba4f93473&pass=1477330237.522-AXz4ir 3kW&jschl_answer=114633

http://indir.gezginler.net/i/5997/.../

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=ad7a82956acf13f5b98958a7e652b7ff&pass=1484429276.942-1QuxOZiPTa&jschl_answer=10283

http://indir.gezginler.net/i/5997/.../

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=502eed65968a16a7662cba509cc0dfe5&pass=1484553952.748-LMsD8goBOZ&jschl_answer=-859

http://download2.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=9cc2acd7485f4e55717ba47ce3a368d3&pass=1478458799.07-RKxcoyiFiF&jschl_answer=65874

http://download2.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=9c6772ecc0e25a5314ee0298ae43564f&pass=1477740932.642-UgawNFeeLk&jschl_answer=-744

http://download.taleworlds.com/cdn-cgi/.../chk_jschl?jschl_vc=f2bffb764ee21c8c133cd10118c006a8&pass=1487953731.165-ktW TX7nT6&jschl_answer=15165696263

Latest 30 of 179 download URLs

Scan mb_warband_setup_1168.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.