Spore

[cdkiller]

Title: Spore
Version: 1.0
Developer: Electronic Arts / Maxis
Publisher: Electronic Arts
Language: multi
MediaType: DVD

Scanning -> D:\Spore\SporeApp.exe
File Type : Exe, Size : 27141384 (019E2508h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 019E1000h, size : 01508h / 05384 byte(s)
[Heuristics] -> Flag : 00000000000000000000000000000101
[!] SecuROM Detected - Version 07.37.0014
- Scan Took : 4.828 Second(s)

Scanning -> D:\Spore\paul.dll
File Type : Dll, Size : 267528 (041508h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 040000h, size : 01508h / 05384 byte(s)
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] SecuROM Modified PA Module Detected
- Scan Took : 0.922 Second(s)

[sylar91]

Title: Spore (+ Creepy And Cute Parts Pack)
Version: 1.03
Developer: Electronic Arts / Maxis
Publisher: Electronic Arts
Language: multi
MediaType: DVD

Scanning -> F:\Programmi\Electronic Arts\SPORE\Sporebin\SporeApp.exe
File Type : Exe, Size : 22344976 (0154F510h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0154E000h, size : 01510h / 05392 byte(s)
[Heuristics] -> Flag : 00000000000000000000000000000101
[!] SecuROM Detected - Version 07.37.0014
[!] Possible CD/DVD-Key or Serial Check -> Invalid serial
- Scan Took : 12.891 Second(s)

Scanning -> F:\Programmi\Electronic Arts\SPORE\Sporebin\paul.dll
File Type : Dll, Size : 267528 (041508h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 040000h, size : 01508h / 05384 byte(s)
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] SecuROM Modified PA Module Detected
[!] Possible CD/DVD-Key or Serial Check -> registration code
- Scan Took : 0.766 Second(s)

[sylar91]

version: 1.05.0001

Scanning -> D:\Program Files\Electronic Arts\SPORE\Sporebin\SporeApp.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 24868112 (017B7510h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 017B6000h, size : 01510h / 05392 byte(s)
[File Heuristics] -> Flag : 00000000000000000001000000000101 (0x00001005)
[!] SecuROM Detected - Version 07.37.0014
[!] Possible CD/DVD-Key or Serial Check -> Invalid serial
[CompilerDetect] -> Visual C/C++
- Scan Took : 22.687 Second(s)


Scanning -> D:\Program Files\Electronic Arts\SPORE\Sporebin\paul.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 267528 (041508h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 040000h, size : 01508h / 05384 byte(s)
[File Heuristics] -> Flag : 00000000000000001000000000000100 (0x00008004)
[!] Possible CD/DVD-Key or Serial Check -> registration code
[CompilerDetect] -> Visual C/C++
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.937 Second(s)

[TippeX]

hmm paul.dll should have been detected, can you put the file online somewhere please sylar91? thanks in advance

[sylar91]

i noticed that pid didn't recognize it, but it's strange because the file never change after an update.

p.s. pid v0.6.3.5 on winxp pro sp3.

h**p://hotfile.com/dl/23282979/fc9c877/paul.dll.html

[TippeX]

thx sylar91 - i've updated the code now, ea seem to have changed version information on the file with that update, leading it to not being detected.. now it is

Scanning -> paul.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 267528 (041508h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 040000h, size : 01508h / 05384 byte(s)
[File Heuristics] -> Flag : 00000000000000001000000000000100 (0x00008004)
[!] SecuROM Modified PA Module Detected
[CompilerDetect] -> Visual C/C++
- Scan Took : 0.641 Second(s)


next pid update will have this fix, i will also be revising the code a little / tidying it up, thanks again for your support and assistance, its appreciated

[sylar91]

no problem.. just a little update

Title: Spore Galactic Adventures
Version: 1.0 (file version : 3.0.0.2688)
Developer: Electronic Arts / Maxis
Publisher: Electronic Arts
Language: multi
MediaType: DVD

Scanning -> D:\Program Files\Electronic Arts\SPORE_EP1\SporebinEP1\SporeApp.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 24583952 (01771F10h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 01770A00h, size : 01510h / 05392 byte(s)
[File Heuristics] -> Flag : 00000000000001001101000000000100 (0x0004D004)
[CompilerDetect] -> Visual C/C++
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 2.906 Second(s)

Version: 1.01 (file version : 3.0.0.2818) (patch 1.05.0001)

Scanning -> D:\Program Files\Electronic Arts\SPORE_EP1\SporebinEP1\SporeApp.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 24909584 (017C1710h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 017C0200h, size : 01510h / 05392 byte(s)
[File Heuristics] -> Flag : 00000000000001001101000000000100 (0x0004D004)
[CompilerDetect] -> Visual C/C++
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 4.891 Second(s)

[I] Init cd/dvd sector scan for Drive M
[Disk Heuristics] -> Flag : 00000000000000000000000000010001 (0x00000011)
-> Protection : None/Unknown
[!] Disc appears to have no protection or is using an unknown protection
- Scan Took : 0.984 Second(s)

+ SERIAL & CD-CHECK