The setup exe (Company of Heroes 2 Setup) File Malware Analysis

The setup.exe (Company of Heroes 2 Setup) File Analysis

Updated 6 months ago

Checked by Malware Check

setup.exe

Hash Type	Value	Action
MD5	22031a2767be285e88d0d70338f354f5
SHA1	bba4144914bd9aae58513743518a8f5efa4a8f26
SHA256	11c39a9aca7ac7aa7417639242f2e47101864f6461a55436cf87acc00a9416a6
SHA512	9f313becea1e93b37a54149d9d83d7a80e6f3a44f53365ac1e65e6a91bd9f17d0b70f28d0a57e3ef748d5df6f551ef21005dcad933995561e16c272cf8e3a85f
ImpHash	884310b1928934402ea6fec1dbd3cf5e

Hash Type

Value

Action

MD5

22031a2767be285e88d0d70338f354f5

SHA1

bba4144914bd9aae58513743518a8f5efa4a8f26

SHA256

11c39a9aca7ac7aa7417639242f2e47101864f6461a55436cf87acc00a9416a6

SHA512

9f313becea1e93b37a54149d9d83d7a80e6f3a44f53365ac1e65e6a91bd9f17d0b70f28d0a57e3ef748d5df6f551ef21005dcad933995561e16c272cf8e3a85f

ImpHash

884310b1928934402ea6fec1dbd3cf5e

PE Analysis

Basic Information

▼

Icon	Hash: b4fed065573fd060865c9fde33c3175c Fuzzy: 072022c1cc783146cb40c42b062a3911 dHash: 2c2e1f272b3f1f0b
Image Base	`0x00400000`
Entry Point	`0x00409c14`
Compilation Time	1992-06-19 22:22:17
Checksum	0x00000000 (Actual: 0x005c609f)
OS Version	1.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries kernel32, user32, oleaut32, advapi32, comctl32
Exports	0 functions
Resources	11 Resources
Sections	8 Sections

Version Information

▼

Comments	This installation was built with Inno Setup.
CompanyName
FileDescription	Company of Heroes 2 Setup
FileVersion
LegalCopyright
ProductName	Company of Heroes 2
ProductVersion	1.0
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`CODE`	`0x00001000`	37,688 bytes	37,888 bytes	6.56 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0F1E58BEE0E7F7B353DE3DDE9DE0259D`
`DATA`	`0x0000b000`	588 bytes	1,024 bytes	2.75 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`1AFD2A5D0373792E0D1942B295194E3C`
`BSS`	`0x0000c000`	3,664 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0000d000`	2,384 bytes	2,560 bytes	4.43 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BB5485BF968B970E5EA81292AF2ACDBA`
`.tls`	`0x0000e000`	8 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x0000f000`	24 bytes	512 bytes	0.20 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`9BA824905BF9C7922B6FC87A38B74366`
`.reloc`	`0x00010000`	2,224 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`D41D8CD98F00B204E9800998ECF8427E`
`.rsrc`	`0x00011000`	15,712 bytes	15,872 bytes	5.58 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_SHARED\|IMAGE_SCN_MEM_READ`	`B5A7F085687CAAF9852613900F255575`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 11 (14,998 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	1	9,640 bytes	64.3%
RT_STRING	6	2,710 bytes	18.1%
RT_RCDATA	1	44 bytes	0.3%
RT_GROUP_ICON	1	20 bytes	0.1%
RT_VERSION	1	1,208 bytes	8.1%
RT_MANIFEST	1	1,376 bytes	9.2%

Certificate Chain Analysis

▼

Certificate Information

Product	Company of Heroes 2
Description	Company of Heroes 2 Setup

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	setup.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.217.174
Database Version	2025-05-26 20:00:15 UTC

The setup.exe (Company of Heroes 2 Setup) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification