home

mb_warband_upgrade_1100_to_1153.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from s7889.chomikuj.pl and multiple other hosts.
MD5:
e8f4919d684c93d9e73256159b27535f

SHA-1:
2b91f79849099c0f37c2e4bf8c8fba0707cd8143

SHA-256:
ad86aff5045dbe6f37c05b36e35567d62d4b81779f57bdd4f140eb70b124ba49

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 6:15:04 PM UTC  (today)

File size:
97.8 MB (102,516,655 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\games\mount&blade warband\modules\native\mb_warband_upgrade_1100_to_1153.exe

File PE Metadata
Compilation timestamp:
12/5/2009 10:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3145728:9N8T6R5QFbrMSxhdFFNdFGMJnf8RKFVH/ZerVd2qk:9s6DQFbT7dFl8RKF+rVcqk

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.9910

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file mb_warband_upgrade_1100_to_1153.exe has been discovered within the following program.

Mount & Blade: Warband  by Taleworlds Entertainment
Mount & Blade: Warband is the first sequel to the action role-playing video game Mount & Blade. Warband expands on the original game by introducing a sixth faction increasing the political options, allowing players to start their own faction, and incorporating multiplayer modes.
www.taleworlds.com
About 6% of users remove it
 
Powered by Should I Remove It?

The file mb_warband_upgrade_1100_to_1153.exe has been seen being distributed by the following 15 URLs.

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1s-v0wsqLSMstAhRjPs0Y0649w-4A4v8FeNvLje0D8BCsFHhaPrQ0pVRFDAnNhMZRkasKSpwFDUoUF6yy_oHYU9CkFnK9MxNrLJdt1PDusZ_usRSTqWDFmuMJrrqYboVQM&pv=2

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1vg6jPuY8KhLOpQPztiMdXP07v-Eo8IsCIcQRLSbcRBymH4e_aGe6a8ppoV0PTswCfpikMwQynr5eYVhddIxjm9emTGwsL4WdWLsJ-XcLsvFIdceL_Hz1dKB_WXcbJXDEqoafo5G-vaIMagnq4tPpCm&pv=2

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1tZJXbxcBU3JV6fMbDuiytQhq5ktiLNhUHUXyOS1yMPWmciSeNOVvsm94wsXZ5xAcHMNXjXs8wUsHR_3qOy-6tjwDnEMwURSX4gCVRVxrAp1iMLoAexsspPkqmWnIFf9ok&pv=2

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1vKqRh_38JcmlcqQra8f787xp0lXV48pauPCMrYOlJ6K4FrDV0kM51sCcVxQuP7avPOG8WhD6kRURyjLbAxJ7Kxe0vDHURPa-I_2SUS2bVyERBB2djckL73B5XRJn880kI&pv=2

http://us3cdn.ausgamers.com/downloads/.../mb_warband_upgrade_1100_to_1153.exe

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1v3ji2XcjZTuoivP-55C7Jz89li1Skk7UiBEbEIq2olo8TBTFVrwHRRhFnUj0wdzNXBYiEtCAmj5eV5p9gr-FW2pFzQn5CebZVY04DH8F3nYUQKp1XRKNr48LTclnkD-RA&pv=2

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1um4y2cjk1ijAcR0B-d_VsLiGRHCYhav1JOiMAplhk9G3RSybWiC4h9qlJLGa8PS23AwEgvkbMyyoGt9NSi2Q30vr4mzWvs4Js2CX350C611eR_Z_-8-a5MOQjOYjnjuxc&pv=2

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1vtQyPX--JlGMtO-xAdxxyTJZwBMD14kAOv9uQmED1b_pIHFVSSmCv2AUsgWr_XM9K_xbTrTlgXMblvuznLGulYG5NoA96lfZ2bvu2hnqsIijesMRYjXXlBBE97l8xcYhw&pv=2

http://revpx5.chomikuj.pl/.../File.aspx?e=T07TdM_NBnQUamBSXRbKg97DkzKkr6qATBKv0r_hcebPIfs59Ng26OJ2g-mCHCuD1zAj-7lTy-J8M1HBrlAbrx3M0z7g4XCMHlWCN8bWRJtzzWnOR7dMKo1GIGaNhPfm-dMPYo5HfZw_-Sx3G5Yj5r1TASyoGH0UOMc2wiI0dsU&pv=2

https://steamcommunity.com/linkfilter/?url=http://.../mb_warband_upgrade_1100_to_1153.exe

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1uV1NJrcq3lz6C3Q-sYqg-xTGJ41sr9bd7TcaknfrRcBG_LbJ0ZBAeXGHneceD8FtlTZAAxljrC_TUW94oq5h6qQ-Fwxe3PgnZLprE2PdfB6KuKJjVI6-2IsLdKLYDJj44&pv=2

http://rusmnb.ru/index.php?action=dldir;sa=get;file=435;e=aHR0cDovL2Rvd25sb2FkLnRhbGV3b3JsZHMuY29tL21iX3dhcmJhbmRfdXBncmFkZV8xMTAwX3RvXzExNTMuZXhl;dl=13

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1sZChwLL3GRUqE3cP6SJZSi0uR0eCP-8XPYKF5J0E5Txbwc2HwLRK6fsH1Ph1yX1vqzTfBmlcWo-5rJW39hCp1RfsM580lJAYF2k3mldGjJpe79wFBNiUPvcGlJvkohwkw&pv=2

http://s7889.chomikuj.pl/File.aspx?e=T07TdM_NBnQUamBSXRbKgw0ElpWRVdZ4dVYrO0cgT1v93zCMtr_Ys5PHrqFZQ_vV5qLa5qavaZUEfL9or4RtJ1M7eTQz1a43baWokLiwi2Nst4zrZcJsbvTKW9KlWAGAWB5X-GINAToWf6mp_HcuTw9yYAG_BLmVQOWiQpoAX3Skus5a7j67-DLnSUDNnQQg&pv=2

http://download.taleworlds.com/mb_warband_upgrade_1100_to_1153.exe

Scan mb_warband_upgrade_1100_to_1153.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.