East India Company (+ Pirate Bay)

[ShadowDuke]

Title: East India Company + Add-On Pirate Bay
Version: v1.0
Developer: Nitro Games
Publisher: Paradox Interactive
Language: English
MediaType: DVD (1 GB)

Scanning -> \East India Company\eastindia.exe
File Type : Exe, Size : 5754232 (057CD78h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 057B860h, size : 01518h / 05400 byte(s)
-> File has 4794464 (0492860h) bytes of appended data starting at offset 0E9000h
[Heuristics] -> Flag : 00000000000000000000010000000100
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.500 Second(s)

Scanning -> \East India Company\piratebay.exe
File Type : Exe, Size : 5725304 (0575C78h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0574760h, size : 01518h / 05400 byte(s)
-> File has 4765536 (048B760h) bytes of appended data starting at offset 0E9000h
[Heuristics] -> Flag : 00000000000000000000010000000100
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.609 Second(s)

Scanning -> \East India Company\ReactorActivate.exe
File Type : Exe, Size : 419056 (0664F0h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 065400h, size : 010F0h / 04336 byte(s)
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] Stardock Product Activation Module v1. 2. 0. 0 !
- Scan Took : 0.953 Second(s)

[sylar91]

i "hear" that protection is Impulse + Serials .....

edit : version 1.01

Scanning -> F:\eastindia.exe
File Type : Exe, Size : 5759096 (057E078h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 057CB60h, size : 01518h / 05400 byte(s)
-> File has 4799328 (0493B60h) bytes of appended data starting at offset 0E9000h
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.546 Second(s)

Scanning -> F:\NGMultiplayer_pb.dll
File Type : Dll, Size : 72472 (011B18h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 010600h, size : 01518h / 05400 byte(s)
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] Possible CD/DVD-Key or Serial Check -> CDKey
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.922 Second(s)

Scanning -> F:\ReactorActivate.exe
File Type : Exe, Size : 419056 (0664F0h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 065400h, size : 010F0h / 04336 byte(s)
[Heuristics] -> Flag : 00000000000000000000000000000100
[!] Stardock Product Activation Module v1. 2. 0. 0 !
- Scan Took : 0.875 Second(s)

[munsterbuster]

Or Steam.

[cdkiller]

"Stardock Product Activation Module v1. 2. 0. 0", i don´t know if it is essential for the game, but the developers included that exe and we are reporting it.

Impulse detection is already in the work and will be available in the next pid update

[TippeX]

seems you're right cdk..

http://www.stardock.com/sdnet_account.asp

"Impulse is a program that enables you to download, update, and archive your Stardock software. Before you can use it, you need to create a Stardock.Net account."

so it'd appear the product is called stardock product activation, impluse is the tool that does the work...

[cdkiller]

here is the complete list, pid is detecting the impulse drm now

Scanning -> D:\East India Company\eastindia.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 5754232 (057CD78h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 057B860h, size : 01518h / 05400 byte(s)
-> File has 4794464 (0492860h) bytes of appended data starting at offset 0E9000h
[File Heuristics] -> Flag : 00000000000000001000000000000100 (0x00008004)
[!] Impulse DRM detected !
[CompilerDetect] -> Visual C/C++
- Scan Took : 0.625 Second(s)

Scanning -> D:\East India Company\piratebay.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 5725304 (0575C78h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0574760h, size : 01518h / 05400 byte(s)
-> File has 4765536 (048B760h) bytes of appended data starting at offset 0E9000h
[File Heuristics] -> Flag : 00000000000000001000000000000100 (0x00008004)
[!] Impulse DRM detected !
[CompilerDetect] -> Visual C/C++
- Scan Took : 0.719 Second(s)

Scanning -> D:\East India Company\ImpulseReactor.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 1167616 (011D100h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 011C000h, size : 01100h / 04352 byte(s)
[File Heuristics] -> Flag : 00000000000000001000000000000100 (0x00008004)
[!] Impulse DRM Core Module v1. 0. 0. 33
[CompilerDetect] -> Visual C/C++
- Scan Took : 0.921 Second(s)

Scanning -> D:\East India Company\ReactorActivate.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 419056 (0664F0h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 065400h, size : 010F0h / 04336 byte(s)
[File Heuristics] -> Flag : 00000000000001001100000000000100 (0x0004C004)
[!] Stardock Product Activation Module v1. 2. 0. 0 !
[CompilerDetect] -> Visual C/C++
- Scan Took : 0.890 Second(s)