home

mb_warband.exe

Mount&Blade: Warband

Taleworlds Entertainment

Publisher:
Taleworlds Entertainment

Product:
Mount&Blade: Warband

Version:
1, 0, 0, 0

MD5:
edf89ad17d39b54ed2f0b53cbb4ca9f2

SHA-1:
7886862b5df1214dced83971e3f994bc0974c521

SHA-256:
8d7c22ec7d97423df4a7469e70d334e8715107a0db0781c8e2eeefc3549345c1

Scanner detections:
1 / 68

Status:
Clean  (1 probable false positive detection)

Explanation:
This is mosty likely a false positive detection, the file is probably clean.

Analysis date:
11/25/2024 10:22:57 PM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAutoA
1.3.0.4923

File size:
4.9 MB (5,160,448 bytes)

Product version:
1, 0, 0, 0

Copyright:
Copyright © 2008-2010 Taleworlds

Original file name:
mb_warband.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\mount&blade warband\mb_warband.exe

File PE Metadata
Compilation timestamp:
3/30/2010 3:42:38 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:WM4duBf4FDy8GHYlCtti/SJKtSQFPll11N5NSe3zwclx1O47pJmMSB/K:WM4duBf4ty8GHYktoBtSQPlz1DO47pJZ

Entry address:
0x2068D8

Entry point:
E8, 48, FC, 00, 00, E9, 78, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9, 00, 00, 00, FF, 74, 02, EB, CD, 8D, 41, FF, 8B, 4C...
 
[+]

Entropy:
6.5754

Code size:
3.7 MB (3,849,216 bytes)

The file mb_warband.exe has been seen being distributed by the following 8 URLs.

https://doc-00-48-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/t77ve3lptmakh74bgiu60vu0kmmjp4ie/1483804800000/17680132996721335564/.../0B4y7Vfz38jd3c1RDWnhodktiZUU?e=download

http://s8870.chomikuj.pl/File.aspx?e=nXTRBCHAOzaromifeOzn6BfxDafpgveN7totZ7jOI5uFLgXtr0UabiIKcKNWUYQfLvpQ0uzFp9AXhs8tyQI0uiXHgdOh7T7ZCQ7A1DipUwYqqy6lq0bV2JJedJjVohBnff8-9-ANpQODEH-Mc_RvgQH5DQitUPBBK-PzoCb9wto&pv=2

http://s6591.chomikuj.pl/File.aspx?e=nXTRBCHAOzaromifeOzn6NlBg5heomVVKirUhh0ybOP-VQnq5Ir18Iwbiu3pRJUZ9jmI_JaVK0ANqsNHB-sY14VMmC6-YLuvsjL1Vq08gDoaexqcufaBH3UeV5g2g_SbGizbjAPuJZ5klgbq523N94J8iN-SVKmIgHSXpBzxZRk&pv=2

http://s6591.chomikuj.pl/File.aspx?e=nXTRBCHAOzaromifeOzn6BfxDafpgveN7totZ7jOI5t8KYgA2kIJ2Z7ezvl9IqGuJHrZgp2qyI-08yRE0bR_uxup1CjQ9YaOqEVkgLiHGgf_tmuvR7QeGdP3A02ZP8HiYXwsLP6AL8VrPNBlR8fduYNNPtNFlO6bbuL51_BA5Jk&pv=2

https://docs.google.com/uc?id=0B4y7Vfz38jd3c1RDWnhodktiZUU&export=download

http://s10269.chomikuj.pl/File.aspx?e=nXTRBCHAOzaromifeOzn6BfxDafpgveN7totZ7jOI5vRbXFzEvsOYKHtzNfQSMSIaoUxSOHX9Rk6vRjxZimgR4pu7YmaYQaFcSrycMBeTH1tiLC2Emr_V6tZ28e6jlFKlWx2g7GI9oVV1eHCyG8scygiytSHz35FEP2OR8S-nFc&pv=2

https://docs.google.com/uc?authuser=0&id=0B4y7Vfz38jd3c1RDWnhodktiZUU&export=download

http://s10269.chomikuj.pl/File.aspx?e=nXTRBCHAOzaromifeOzn6BfxDafpgveN7totZ7jOI5t7-NL8iHHT8LKlPqD8uZL-BM9eSDm6oISJAyEsyI2tUfRSQ5sRSxEIoSljATn20wES10wp1dgQ9gfvvrCVSqAKBAFqBDBBitghzRTr9V7-zNtuR_xtg90WkrqkZHKMpBw&pv=2

Scan mb_warband.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.