Alarm for Cobra 11: Highway Nights

[quake_ger]

Title: Alarm for Cobra 11: Highway Nights Demo
Version: v4.1.1.0
Developer: Synetic
Publisher: RTL

Scanning -> HighwayNightsHi.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 5869056 (0598E00h) Byte(s)
[File Heuristics] -> Flag : 00000000000001000000001000100011 (0x00040223)
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.423 Second(s)

Scanning -> HighwayNightsHi-x86.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 736384 (0B3C80h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0B1E00h, size : 01E80h / 07808 byte(s)
[File Heuristics] -> Flag : 00000000000001001101001100000111 (0x0004D307)
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.532 Second(s)

Scanning -> HighwayNightsLow.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 5776896 (0582600h) Byte(s)
[File Heuristics] -> Flag : 00000000000001000000001000100011 (0x00040223)
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.376 Second(s)

Scanning -> HighwayNightsLow-x86.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 728704 (0B1E80h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0B0000h, size : 01E80h / 07808 byte(s)
[File Heuristics] -> Flag : 00000000000001001101001100000111 (0x0004D307)
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.750 Second(s)


--> ProtectDisc 9.2.5.0 found!

[Blazkowicz]

Did you check dll of ProtectDisc for exact version or how did you get the version?

[quake_ger]

yup the dll...also protect code says about it.

02E5490B 68 87630100 PUSH 16387
02E54910 6A 00 PUSH 0
02E54912 6A 19 PUSH 19
02E5491B 6A 09 PUSH 9

v 0x9. 0x19. 0x0. 0x16387
= 9.25.0 build 91015 = 15th oct. 2009

[cdkiller]

Scanning -> D:\Cobra 11 - Highway Nights Demo\HighwayNightsHi.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 5869056 (0598E00h) Byte(s)
[File Heuristics] -> Flag : 00000000000001000000001000100011 (0x00040223)
[!] Protect DiSC v9.x.x [Build 0x16387 / 91015] detected!
[i] pcd mode: protected demo or online validation
[i] cd/dvd check enabled: no
- Scan Took : 1.721 Second(s)

Scanning -> D:\Cobra 11 - Highway Nights Demo\HighwayNightsHi-x86.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 736384 (0B3C80h) Byte(s)
-> File Appears to be Digitally Signed @ Offset 0B1E00h, size : 01E80h / 07808 byte(s)
[File Heuristics] -> Flag : 00000000000001001101001100000111 (0x0004D307)
[!] VM Protect v1.60 - v2.00 (or newer) detected !
- Scan Took : 1.690 Second(s)

just added v9.20 yesterday, going to do the 9.25 now

[cdkiller]

patch 1.11

Scanning -> HighwayNightsHi.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 5973504 (05B2600h) Byte(s)
[x] Warning - FileAlignment seems wrong.. is 0x00000200, calculated 0x00000400
[File Heuristics] -> Flag : 00000000000001000000001000100011 (0x00040223)
[!] Protect DiSC v9.26.0 [Build 0x163E8 / 91112] detected!
[i] cd/dvd check enabled: yes
[i] trial usage activated : no
- Scan Took : 0.766 Second(s)

Scanning -> HighwayNightsLow.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 5872128 (0599A00h) Byte(s)
[x] Warning - FileAlignment seems wrong.. is 0x00000200, calculated 0x00000400
[File Heuristics] -> Flag : 00000000000001000000001000100011 (0x00040223)
[!] Protect DiSC v9.26.0 [Build 0x163E8 / 91112] detected!
[i] cd/dvd check enabled: yes
[i] trial usage activated : no
- Scan Took : 0.766 Second(s)