S.T.A.L.K.E.R: Clear Sky

[Blazkowicz]

Title: S.T.A.L.K.E.R: Clear Sky
Version: 1.5.0.0
Developer: GSC Game World
Publisher: GSC World Publishing
Language: Russian
MediaType: DVD

StarForce 5.60.001.018

1.5.03 patch:

Scanning -> D:\Ñ.Ò.À.Ë.Ê.Å.Ð. - ×èñòîå Íåáî\bin\protect.dll
File Type : Dll, Size : 7873896 (0782568h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0781000h, size : 01568h / 05480 byte(s)
[Heuristics] -> Flag : 00000000000000000000001000100111
[!] StarForce 32 Bit v5.60.001.021 [FL Disc]
- Scan Took : 0.453 Second(s)

[nando2002]

Title: S.T.A.L.K.E.R. Clear Sky
Version: 1.01
Developer: GSC Game World
Publisher: THQ
Language: EFIGS
MediaType: DVD

Scanning -> H:\Jogos\V1.01_stkcs-for-pack-efigs-patch-any-3\{app}\bin\dedicated\xrEngine.exe
File Type : Exe, Size : 1909440 (01D22C0h) Byte(s)
[Heuristics] -> Flag : 00000000000000000000010000000000
-> File Appears to be Digitally Signed @ Offset 01D1000h, size : 012C0h / 04800 byte(s)
[!] Possible CD/DVD-Key or Serial Check -> Unregistered
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.766 Seconds

Scanning -> H:\Jogos\V1.01_stkcs-for-pack-efigs-patch-any-3\{app}\bin\dedicated\xrGame.dll
File Type : Dll, Size : 6520832 (0638000h) Byte(s)
[Heuristics] -> Flag : 00000000000000000000010000000000
[!] Possible CD/DVD-Key or Serial Check -> CDKey
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.625 Seconds

Scanning -> H:\Jogos\V1.01_stkcs-for-pack-efigs-patch-any-3\{app}\bin\dvm.dll
File Type : Dll, Size : 27201913 (019F1179h) Byte(s)
[Heuristics] -> Flag : 00000000000000000000010100000000
-> File has 26981241 (019BB379h) bytes of appended data starting at offset 035E00h
[!] SolidShield Core.dll v1, 9, 7, 3
- Scan Took : 1.719 Seconds

Scanning -> H:\Jogos\V1.01_stkcs-for-pack-efigs-patch-any-3\{app}\bin\xrEngine.exe
File Type : Exe, Size : 1618184 (018B108h) Byte(s)
[Heuristics] -> Flag : 00000000000000000000011100010011
-> File Appears to be Digitally Signed @ Offset 0189E48h, size : 012C0h / 04800 byte(s)
-> File has 251464 (03D648h) bytes of appended data starting at offset 014DAC0h
[!] SolidShield v 01.09.07.03 detected !
- Scan Took : 0.797 Seconds

[Blazkowicz]

Regarding multi5 version:

It should be Tages 5.5.4.1.

[rcd]

it is Tages

[Blazkowicz]

That is clear it is Tages rcd, i was talking about exact Tages version.

[ShadowDuke]

Title: S.T.A.L.K.E.R. Clear Sky
Version: 1.1.0.5
Developer: GSC Game World
Publisher: THQ
Language: EFIGS
MediaType: DVD

Scanning -> C:\Spiele\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe
File Type : Exe, Size : 810904 (0C5F98h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0C4CD8h, size : 012C0h / 04800 byte(s)
-> File has 251096 (03D4D8h) bytes of appended data starting at offset 088AC0h
[!] SolidShield detected !
- Scan Took : 0.875 Seconds

Scanning -> C:\Spiele\S.T.A.L.K.E.R. - Clear Sky\bin\xrGame.dll
File Type : Dll, Size : 6782976 (0678000h) Byte(s)
[!] Possible CD/DVD-Check String -> ValidateCD
[!] Possible CD/DVD-Key or Serial Check -> CDKey
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.485 Seconds

Scanning -> C:\Spiele\S.T.A.L.K.E.R. - Clear Sky\bin\dvm.dll
File Type : Dll, Size : 26114237 (018E78BDh) Byte(s)
-> File has 25893565 (018B1ABDh) bytes of appended data starting at offset 035E00h
[!] SolidShield Core.dll v1, 9, 7, 3
- Scan Took : 2.844 Seconds

Scanning -> C:\Spiele\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrGame.dll
File Type : Dll, Size : 6569984 (0644000h) Byte(s)
[!] Possible CD/DVD-Check String -> ValidateCD
[!] Possible CD/DVD-Key or Serial Check -> CDKey
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.485 Seconds

Scanning -> C:\Spiele\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe
File Type : Exe, Size : 1102528 (010D2C0h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 010C000h, size : 012C0h / 04800 byte(s)
[!] Possible CD/DVD-Key or Serial Check -> Unregistered
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.859 Seconds

[cdkiller]

update v1.5.0.9 (international dvd version)

xrEngine.exe
File Type : 32-Bit Exe, Size : 1203520 (0125D40h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0124A80h, size : 012C0h / 04800 byte(s)
-> File has 643200 (09D080h) bytes of appended data starting at offset 087A00h
[File Heuristics] -> Flag : 00000000000001001100001100010111 (0x0004C317)
[!] SolidShield EXE Wrapper detected !
- Scan Took : 0.719 Second(s)

dvm.dll
File Type : 32-Bit Dll, Size : 37051931 (02355E1Bh) Byte(s)
-> File has 36764187 (0230FA1Bh) bytes of appended data starting at offset 046400h
[File Heuristics] -> Flag : 00000000000001001100000100000100 (0x0004C104)
[!] SolidShield Core.dll [unknown version]
[i] Tages Setup Version: v5.5.5.2
[CompilerDetect] -> Visual C/C++
- Scan Took : 0.812 Second(s)

update v1.5.0.9 (digital download version)

xrEngine.exe
File Type : 32-Bit Exe, Size : 1203520 (0125D40h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0124A80h, size : 012C0h / 04800 byte(s)
-> File has 643200 (09D080h) bytes of appended data starting at offset 087A00h
[File Heuristics] -> Flag : 00000000000001001100001100010111 (0x0004C317)
[!] SolidShield EXE Wrapper detected !
- Scan Took : 0.734 Second(s)

dvm.dll
File Type : 32-Bit Dll, Size : 36276425 (022988C9h) Byte(s)
-> File has 35988681 (022524C9h) bytes of appended data starting at offset 046400h
[File Heuristics] -> Flag : 00000000000001001100000100000100 (0x0004C104)
[!] SolidShield Core.dll [unknown version]
[i] Tages Setup Version: v5.5.5.2
[CompilerDetect] -> Visual C/C++
- Scan Took : 1.640 Second(s)

TagesClient.exe
File Type : 32-Bit Exe, Size : 448160 (06D6A0h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 06BA00h, size : 01CA0h / 07328 byte(s)
[File Heuristics] -> Flag : 00000000000001001000000000000100 (0x00048004)
[!] Tagès Activation Client v. 5.5.3.6
[CompilerDetect] -> Visual C/C++
- Scan Took : 0.860 Second(s)

[cdkiller]

update v1.5.0.9 (russian dvd version)

xrEngine.exe
File Type : 32-Bit Exe, Size : 1151680 (01192C0h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0118000h, size : 012C0h / 04800 byte(s)
[File Heuristics] -> Flag : 00000000000000011100000000000101 (0x0001C005)
[!] StarForce 32 Bit v4.50 - 5.x (or higher) [<Unknown>]
- Scan Took : 0.688 Second(s)

protect.exe
File Type : 32-Bit Exe, Size : 532592 (082070h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 080B28h, size : 01548h / 05448 byte(s)
-> File has 188712 (02E128h) bytes of appended data starting at offset 052A00h
[File Heuristics] -> Flag : 00000000000000001100001100100111 (0x0000C327)
[!] StarForce 32 Bit v5.60.002.008 [FL Disc]
[!] UPX 3.02 compressed !
upx internal version : 013 / compression method : 08 (M_NRV2E_LE32) - Level : 09
decompressed adler32 : 0xADC2C34E / compressed adler32 : 0xFB74FA0E
uncompressed size : 0x000E03C7 (0918471) / compressed size : 0x0003EED7 (0257751)
original file size : 0x000D8000 (0884736) / filter : 0x026 / ct0 0x21 / linkchecksum : 0x0BA
- Scan Took : 0.109 Second(s)

protect.dll
File Type : 32-Bit Dll, Size : 8513384 (081E768h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 081D200h, size : 01568h / 05480 byte(s)
[File Heuristics] -> Flag : 00000000000000001100001000100111 (0x0000C227)
[!] StarForce 32 Bit v5.60.002.008 [FL Disc]
[!] UPX 3.02 compressed !
upx internal version : 013 / compression method : 08 (M_NRV2E_LE32) - Level : 09
decompressed adler32 : 0xEC015867 / compressed adler32 : 0x6D7E605A
uncompressed size : 0x00F46444 (016016452) / compressed size : 0x0081BC70 (08502384)
original file size : 0x00F3F000 (015986688) / filter : 0x00 / ct0 0x00 / linkchecksum : 0x0CC
- Scan Took : 0.547 Second(s)

protect.x64
File Type : 64-Bit Exe, Size : 2823472 (02B1530h) Byte(s)
[!] Warning : File is 64 Bit, this os is NOT
[!] Warning : Cpu is AMD, this file is for IA64 (incompatible)
-> File Appears to be Digitally Signed @ Offset 02AFFD8h, size : 01558h / 05464 byte(s)
-> File has 2108376 (0202BD8h) bytes of appended data starting at offset 0AD400h
[File Heuristics] -> Flag : 00000000000001001100010000010100 (0x0004C414)
[!] StarForce 64 Bit v5.60.002.008 [FL Disc]
[CompilerDetect] -> Visual C/C++
- Scan Took : 0.953 Second(s)

protect.x86
File Type : 32-Bit Exe, Size : 2363512 (0241078h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 023FB20h, size : 01558h / 05464 byte(s)
-> File has 2217760 (021D720h) bytes of appended data starting at offset 022400h
[File Heuristics] -> Flag : 00000000000000001100011000100111 (0x0000C627)
[!] StarForce 32 Bit v5.60.002.008 [FL Disc]
[!] UPX 3.02 compressed !
upx internal version : 013 / compression method : 08 (M_NRV2E_LE32) - Level : 09
decompressed adler32 : 0xC5A5C028 / compressed adler32 : 0x3F9A1726
uncompressed size : 0x0005AB7A (0371578) / compressed size : 0x00021223 (0135715)
original file size : 0x0005A000 (0368640) / filter : 0x026 / ct0 0x13 / linkchecksum : 0x0E7
- Scan Took : 0.484 Second(s)

xrCPU_Pipe.dll
File Type : 32-Bit Dll (compiled in NATIVE mode), Size : 23040 (05A00h) Byte(s)
[File Heuristics] -> Flag : 00000000000000011100000000000001 (0x0001C001)
[!] StarForce 32 Bit v4.50 or higher ? [<Unknown>]
- Scan Took : 0.969 Second(s)

xrGame.dll
File Type : 32-Bit Dll (compiled in NATIVE mode), Size : 6545408 (063E000h) Byte(s)
[File Heuristics] -> Flag : 00000000000000011100000100000001 (0x0001C101)
[!] StarForce 32 Bit v4.50 or higher ? [<Unknown>]
- Scan Took : 1.688 Second(s)