The Setup exe (Elden Ring Setup) dixen18 File Malware Analysis

The Setup.exe (Elden Ring Setup) File Analysis

Updated 9 months ago

Checked by Malware Check

Setup.exe

Hash Type	Value	Action
MD5	19b29836b8a97287f49e3a03e2ed9b73
SHA1	124ebb57445fb36c513c3a28a728b792c52a593f
SHA256	8e197bb06f2316d925512eef282a5cde0de91820ce7ed64f3f797ba745b626db
SHA512	89fce874a0c37c2e36ffbf4233ed6f2f91d51bd8e301f7d5c999ef3739e6113d536e261d8856be5a69a314847fb0cf6101801e3ac3c70fe0cae041d73892413f
ImpHash	483f0c4259a9148c34961abbda6146c1

Hash Type

Value

Action

MD5

19b29836b8a97287f49e3a03e2ed9b73

SHA1

124ebb57445fb36c513c3a28a728b792c52a593f

SHA256

8e197bb06f2316d925512eef282a5cde0de91820ce7ed64f3f797ba745b626db

SHA512

89fce874a0c37c2e36ffbf4233ed6f2f91d51bd8e301f7d5c999ef3739e6113d536e261d8856be5a69a314847fb0cf6101801e3ac3c70fe0cae041d73892413f

ImpHash

483f0c4259a9148c34961abbda6146c1

PE Analysis

Basic Information

▼

Icon	Hash: 2fa85525c42d9d403e87c2063f3bf326 Fuzzy: 484d0c75a5e452a1b8b725dbf8d98a27 dHash: 31b270f0f0f060c4
Image Base	`0x00400000`
Entry Point	`0x00416478`
Compilation Time	2012-10-02 05:04:04
Checksum	0x00000000 (Actual: 0x00350308)
OS Version	5.0
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries oleaut32, advapi32, user32, kernel32, comctl32
Exports	0 functions
Resources	19 Resources
Sections	8 Sections

Version Information

▼

Comments	This installation was built with Inno Setup.
CompanyName	dixen18
FileDescription	Elden Ring Setup
FileVersion
LegalCopyright
ProductName	Elden Ring
ProductVersion
Translation	0x0000 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	82,936 bytes	82,944 bytes	6.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`345DB2B6911ADDC85B53F32245F969A0`
`.itext`	`0x00016000`	3,048 bytes	3,072 bytes	6.02 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`2E74D968CAEDEB2D71B9505530D43907`
`.data`	`0x00017000`	3,484 bytes	3,584 bytes	2.67 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D5B22EFF9E08EDAA95F493C1A71158C0`
`.bss`	`0x00018000`	22,352 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.idata`	`0x0001e000`	3,998 bytes	4,096 bytes	4.97 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`B47EACA4C149EE829DE76A342B5560D5`
`.tls`	`0x0001f000`	8 bytes	0 bytes	0.00 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`D41D8CD98F00B204E9800998ECF8427E`
`.rdata`	`0x00020000`	24 bytes	512 bytes	0.19 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3746F5876803F8F30DB5BB2DEB8772AE`
`.rsrc`	`0x00021000`	260,504 bytes	260,608 bytes	7.28 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`147BE019A3CBFA0D19BCFF67070DDE04`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 19 (259,352 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	6	219,474 bytes	84.6%
RT_STRING	6	3,200 bytes	1.2%
RT_RCDATA	4	34,004 bytes	13.1%
RT_GROUP_ICON	1	90 bytes	0%
RT_VERSION	1	1,208 bytes	0.5%
RT_MANIFEST	1	1,376 bytes	0.5%

Certificate Chain Analysis

▼

Certificate Information

Product	Elden Ring
Description	Elden Ring Setup

✓ This file has been digitally signed and the certificate chain has been verified

The signature ensures file integrity and authenticity from the publisher
Timestamping proves when the signature was applied

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

File Name	Setup.exe
File Type	PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version	1.0.211.174
Database Version	2025-03-18 19:00:32 UTC

The Setup.exe (Elden Ring Setup) File Analysis

Technical Analysis

Clean File

Scan Another File

File Identification