home

sh_crusader_patch_v1-1.exe

Stronghold Crusader Patch v1.1

Firefly Studios

This is a setup program which is used to install the application. This is installed with Stronghold 2 & Crusader. The file has been seen being downloaded from s5872.chomikuj.pl and multiple other hosts.
Publisher:
Firefly Studios

Product:
Stronghold Crusader Patch v1.1

Version:
1.1

MD5:
43a7a2655320401aaad30483edba35d2

SHA-1:
45e8c8428885ae50835da8cd4d8050ad54cafd66

SHA-256:
d3bd0a1c368d2becee9b7c3586c6c81f9318e4f985368f254a016a43a35c0a0b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 1:22:41 AM UTC  (today)

File size:
5.6 MB (5,862,819 bytes)

Product version:
1.1

Original file name:
stub32i.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
6/16/2000 8:00:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:+BexMKy9uEEytMBR7Vao60gT9PyrqHBcPViPCTlPnOMjTTW4wtQnbYTNPNeB35Em:+BHEWSR7Yo6DZauhonCQnbYTyX

Entry address:
0x84A7

Entry point:
55, 8B, EC, 6A, FF, 68, 10, 23, 41, 00, 68, E0, B5, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, E8, 21, 41, 00, 33, D2, 8A, D4, 89, 15, 30, 53, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, 2C, 53, 41, 00, C1, E1, 08, 03, CA, 89, 0D, 28, 53, 41, 00, C1, E8, 10, A3, 24, 53, 41, 00, 33, F6, 56, E8, E0, 00, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 11, 2F, 00, 00, FF, 15, EC, 21, 41, 00, A3, E4, 68, 41, 00, E8...
 
[+]

Entropy:
7.9902

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
68 KB (69,632 bytes)

The file sh_crusader_patch_v1-1.exe has been discovered within the following program.

Stronghold 2 & Crusader  by Firefly Studios Ltd
Publisher's description - “Stronghold Crusader 2 is the long awaited sequel to Stronghold: Crusader, the original 'castle sim'. After 12 years Stronghold returns to the deserts of the Middle East circa 1189, with a new 3D engine and realistic castle destruction powered by Havok Physics.”
www.strongholdcrusader2.com
6% remove it
 
Powered by Should I Remove It?

The file sh_crusader_patch_v1-1.exe has been seen being distributed by the following 9 URLs.

http://s5872.chomikuj.pl/File.aspx?e=3JiEJ4_mldHnf9-QowoKA5Rytk6uZ_Cy0MpEDIkzkWJF43fW_8LODKljTu0c8UxWMiVKPuRMGM25CxKwnD0my81nfUwzycw31L0Dd-hTt6YUa2mGgv5jMrmU_AVbjgK47OxVucH7Qafv_ZWL8X7CPlOMs8kv45t6TEFaLvDJI0A&pv=2

ftp://ftp.take2.de/.../SH_Crusader_Patch_v1-1.exe

http://s5872.chomikuj.pl/File.aspx?e=3JiEJ4_mldHnf9-QowoKAyEXN4hZVEAb2Qxj_XzUR8RUl1Mn59e03j-yWHHAvtZkpcS_18wdtWPdi5_jEnIvdMkThYBivm8_hx-sCVBbgQjFE2a05cKkMq6T3F590JaUhTWGqpgGTl5DkQ67JIt5FF5cw92tve8DL1ed_YD9jBk&pv=2

http://strongholdcrusader-liga.wz.cz/.../Stronghold_crusader_Patch_v_1.1.exe

http://s10026.chomikuj.pl/File.aspx?e=3JiEJ4_mldHnf9-QowoKAyEXN4hZVEAb2Qxj_XzUR8RJMPKAcgsz4cj11Sl2-Lm7m8gVWnYKzviOAed3NJgm5BD4qdOPvzGIhRyFyTDhvXvnpVLw3sGxbTIfq6tisfnwdrzeDTxF8rAuBa9ZufRzST-sfFGM-pAKWcg0dqm_-k4&pv=2

http://s10026.chomikuj.pl/File.aspx?e=3JiEJ4_mldHnf9-QowoKA5Rytk6uZ_Cy0MpEDIkzkWKYXWXp1rE21q3mphykl2fvMtCbhJE1WLx0lQroQc4mqXRsypy6J8waFjtpO3FZWx2PpgpCn_j5A2z756Fk-s2szsPodal9yTF3cbwiKutO5qSic82y4e_RSV-tkn9pPsY&pv=2

http://s5872.chomikuj.pl/File.aspx?e=3JiEJ4_mldHnf9-QowoKA5Rytk6uZ_Cy0MpEDIkzkWJ4Kky5YhsrVwnq55C7v3KA8iOPgfDcbDI5KcfKnFl0HulAnHnqN5jk-fCQobm_bJsOPDJUKZXwOReqkvXRpafUfndCXF6ohfN9n_xWGEw8j6CnlubLCh0MCrUB1AvVFCA&pv=2

http://s5872.chomikuj.pl/File.aspx?e=3JiEJ4_mldHnf9-QowoKAyEXN4hZVEAb2Qxj_XzUR8THSr2keHYccHbE_ZcUrQuHS6-Jokbt0YVeBLzV8J-RMwgzOFoC88wOURnxA7ehVnNHulwS4D3RZEb_tD__nm4H6DB4TUnE2PkIXVFnjhlW3KEbbGStXC81sukzy9d5WmM&pv=2

http://s10026.chomikuj.pl/File.aspx?e=3JiEJ4_mldHnf9-QowoKA5Rytk6uZ_Cy0MpEDIkzkWIE55Kfd-4pURrf3er0Ph-0aOzin19wLEdfGweG1MG14zfxIC08VfSX0qkXZozYwWDfE3ythQnNtI009gUPMO4yZY2mbJqBD2rF2UgAdwYp8TPQuGhAbT94Ck0iaMegDR8&pv=2

Scan sh_crusader_patch_v1-1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.