Explore GameReplays...

Company of Heroes

COHRA: Updated cohra.dat file for 2.602

Reply to this topic Start new topic
# 1aramonkg May 28 2011, 22:31 PM
Ye, pretty much what the title says. Not many things changing, primarily ID for buildings and static defences. And, yes COHRA still works!

Unzip the file and place in the same folder as COHRA's main executable to work. Limitations and bugs as per this post still apply.

If you find anything wrong with it or something not being identified let me know.

Attached File cohra.zip
Size: 2.73k
Number of downloads: 1027
Player Name Side Team

Posts: 1,193

Game: StarCraft 2


+
# 2BrutalismCompany May 28 2011, 23:11 PM
Awesome! Thanks so much for the update!

Posts: 199

Game: Company of Heroes


+
# 3Seb May 28 2011, 23:15 PM
Updated. Much appreciated. smile.gif

Posts: 10,559

Clan: Insane

Game: Company of Heroes


+
# 4Esky May 29 2011, 00:28 AM
Thnx Much

Posts: 255

Game: Company of Heroes


+
# 5AUSOwnage May 29 2011, 01:17 AM
NICE!

Posts: 3,814

Game: Company of Heroes


+
# 6hillhome May 29 2011, 02:57 AM
thanks!!!!!!

Posts: 11,708

Clan: Reign of Madness

Game: Company of Heroes 2


+
# 7RsvT May 29 2011, 06:44 AM
Thank u smile.gif

Posts: 409

Game: Company of Heroes


+
# 8pingtoft May 29 2011, 14:13 PM
thanks smile.gif

Posts: 4,341

Game: Company of Heroes


+
# 9LtAir May 29 2011, 14:15 PM
Thanks! smile.gif

Posts: 395

Game: Company of Heroes


+
# 10HellRaiser May 29 2011, 18:05 PM
aramonkg, you're awesome! Thanks!

Posts: 276

Game: Company of Heroes


+
# 11DaRealRocky May 30 2011, 00:14 AM
Hmm I removed Cohra 3 days ago because, according to malwarebytes, it was an infected file.

And I kinda trust Malwarebytes, because it's the thing that got me completely rid of a trojan horse 3 days ago. (which was called Win 7 security 2011, if anyone wants to know.)

Posts: 4,711

Clan: SoldiersofLiberty

Game: Company of Heroes


+
# 12Inverse May 30 2011, 04:51 AM
<3

Posts: 5,577

Clan: Reign of Madness

Game: Company of Heroes


+
# 1313oomer May 30 2011, 08:14 AM
Does it pick up that the replay is a 2.602 one? Atm, it just says 2.6+

Regardless, good job smile.gif

Posts: 5,710

Clan: Suck it Trebek!

Game: Company of Heroes


+
# 14aramonkg May 30 2011, 12:09 PM
QUOTE(DaRealRocky @ May 30 2011, 03:14 AM) *

Hmm I removed Cohra 3 days ago because, according to malwarebytes, it was an infected file.

And I kinda trust Malwarebytes, because it's the thing that got me completely rid of a trojan horse 3 days ago. (which was called Win 7 security 2011, if anyone wants to know.)

I am almost certain Malwarebytes classified cohra.exe as a Trojan.Agent threat. As a matter of fact, it's a false positive due to the fact that COHRA's executable file is compressed. Not like in ZIP compressed. Read below if you don't mind a bit of computer jargon.

Case is dyxtra, COHRA's developer, decided to compress the executable of it before releasing it for his own reasons. He used PECompact to do so. What compressing an executable means is that its code and data sections are not "known", i.e. you can't determine what the program does, until that program is run and loaded into a computer's memory. This kind of behaviour is commonly used by malware. Case in point VirusTotal's analysis on cohra.exe resulting in two security products classifying cohra.exe as suspicious, most certainly because of its compressed state.

Now some security products integrate decompression methods for known executable packers, so that they actually fully test compressed programs. Seems Malwarebytes doesn't for the specific packer, or the specific version of the packer. However, if you test an uncompressed version of COHRA with it, it will say it's clean. Ta-da, I present you just that, an uncompressed version of COHRA.

Attached File cohra_unpacked.zip
Size: 1.01mb
Number of downloads: 193
Player Name Side Team


Note the difference in size from 869,888 to 2,265,088 bytes. If you scan this file, you will get no threat detected. You can even run this file to confirm it's cohra. You can even open a replay, but that's probably as far as you will get, since after that COHRA will probably crash due to the unpacker that I used being generic and requiring a bit of tweaking to fully work with COHRA. But you need to pay me to do that. tongue.gif

TLDR, non tech-savvy version, COHRA is harmless to your computer.

PS If you are wondering why Malwarebytes hasn't declassified COHRA as malware it's probably because it hasn't received reports to do so, and even if it has, the low popularity of COHRA may not warrant a full analysis on their part.

QUOTE(13oomer @ May 30 2011, 11:14 AM) *

Does it pick up that the replay is a 2.602 one? Atm, it just says 2.6+

Nah, that's hardcoded into it. For it to change, COHRA needs to be updated.

Posts: 1,193

Game: StarCraft 2


+
# 15AUSOwnage May 31 2011, 12:09 PM
My malware (paid version) said the same about CoHra... but I assure you, it's a false negative.

Posts: 3,814

Game: Company of Heroes


+
# 1613oomer Jun 1 2011, 07:10 AM
QUOTE(AUSOwnage @ Jun 1 2011, 00:09 AM) *

a false negative.


wut

Posts: 5,710

Clan: Suck it Trebek!

Game: Company of Heroes


+
# 17rgrrrr Jun 1 2011, 14:30 PM
aramonkg might be one of the coolest guys this community has. good job once again.

Posts: 3,644

Clan: Suck it Trebek!

Game: Achron


+
# 18abhilohia Jun 2 2011, 17:09 PM
Lol I'm a bit new to COHRA so please bear with me. What I'm wondering is that does COHRA actually PLAY the replays, as in you can watch the replay, or can you just analyse the chatlog, CPM and stuff?

And if COHRA does not play replays, then is there any software which does? If so, then a link of some sort would be really appreciated. Thanks.

Posts: 750

Clan: SoldiersofLiberty

Game: Company of Heroes


+
# 19DemocraticSausage Jun 2 2011, 17:53 PM
Thanks for the update!

Posts: 753

Game: Company of Heroes


+
# 20Mindlog Jun 2 2011, 18:22 PM
I think I now why he compressed it, but it's not really an issue anymore. Tanks for the CoHRA update smile.gif

Posts: 836

Game: None


+

1 User(s) are reading this topic (1 Guests and 0 Anonymous Users)