Undisclosed use of Denuvo Anti-Tamper (Update: devs reacted)

[lukaself]

Update: The developers announced that they changed their plans and that Inzoi will not use Denuvo. Here's a link to the announcement: https://steamcommunity.com/games/2456740/announcements/detail/512953841353752634?snr=2___

According to the IP it's trying to connect to, srv01.codefusion.technology, the Demo (Character Creation) uses Denuvo undisclosed.

According to EU legislation, California under AB 2426, and other various countries: disclosure of encryption methods and interoperability issues in advance are a legal requirement.

[AssassinLV]

Ok, deleted the only folder which was created after 21st...
PS C:\Users\AssassinLV\OneDrive\Dators> powershell -executionpolicy bypass -file ".\quick-check.ps1"
Monitoring connections for inZOI-Win64-Shipping. Press Q to stop.
inZOI-Win64-Shipping is not running.
inZOI-Win64-Shipping is not running.
New IP found: 0.0.0.0
New IP found: 54.246.63.78
New IP found: 34.199.208.177
New IP found: 3.164.230.45
New IP found: 3.164.206.12
New IP found: 18.244.18.94
Monitoring stopped. IP list saved to connections.txt.
PS C:\Users\AssassinLV\OneDrive\Dators> Resolve-DnsName 54.246.63.78

Name Type TTL Section NameHost
---- ---- --- ------- --------
78.63.246.54.in-addr.arpa PTR 300 Answer ec2-54-246-63-78.eu-west-1.compute.amazonaws.com


PS C:\Users\AssassinLV\OneDrive\Dators> Resolve-DnsName 34.199.208.177

Name Type TTL Section NameHost
---- ---- --- ------- --------
177.208.199.34.in-addr.arpa PTR 159 Answer ec2-34-199-208-177.compute-1.amazonaws.com


PS C:\Users\AssassinLV\OneDrive\Dators> Resolve-DnsName 3.164.230.45

Name Type TTL Section NameHost
---- ---- --- ------- --------
45.230.164.3.in-addr.arpa PTR 45816 Answer server-3-164-230-45.arn53.r.cloudfront.net


PS C:\Users\AssassinLV\OneDrive\Dators> Resolve-DnsName 3.164.206.12

Name Type TTL Section NameHost
---- ---- --- ------- --------
12.206.164.3.in-addr.arpa PTR 82726 Answer server-3-164-206-12.hel51.r.cloudfront.net


PS C:\Users\AssassinLV\OneDrive\Dators> Resolve-DnsName 18.244.18.94

Name Type TTL Section NameHost
---- ---- --- ------- --------
94.18.244.18.in-addr.arpa PTR 82726 Answer server-18-244-18-94.fra56.r.cloudfront.net

[AssassinLV]

nothing sus as far as I see...

[Dr.Krieger]

All the sad pirates and potatoPC users malding.

Remember: in gaming the minority is the loudest. You will find the same hundred or so users complaining every time, while tens of thousands more carry on with no issues, never saying a word.

If it bothers you so much, don't buy it. Go play something else, there's thousands of other games out there. Or go make your own game without DRM, AI, and whatever other trigger word of the week is.

[AssassinLV]

Also just to make sure - updated the script to show DNS name next to IP upon logging - still no difference - whilst deleting the "3092450" folder from Steams UserData

There is the script:
https://chatgpt.com/share/67e199f5-8084-8009-ac1b-9f93d4d1976e
But do update the process name to "inZOI-Win64-Shipping", it's there has small "L" instead of capital "i" :D

[HeritoBiBuba]

We will see in a few days when the game is released. But if the author is right and denuvo is included, they must inform users about it because they could be sued. Millions of users avoid games with denuvo, so I understand why companies try to hide it.

[AssassinLV]

HeritoBiBuba の投稿を引用：

We will see in a few days when the game is released. But if the author is right and denuvo is included, they must inform users about it because they could be sued. Millions of users avoid games with denuvo, so I understand why companies try to hide it.

Agreed, I'll wait for 1-2 weeks after launch too. :D

Also I'll definetly save my script for future - could be usefull forensic tool for me :D

[Meow]

HeritoBiBuba の投稿を引用：

Millions of users avoid games with denuvo

Exactly. The new Monster Hunter is a good example. Absolute flop. 10k copies sold. RIP in pieces Capcom

[lukaself]

AssassinLV の投稿を引用：

Ok, deleted the only folder which was created after 21st...[...]
New IP found: 54.246.63.78[...]

Here it is. That's the IP address for srv01.codefusion.technology as indicated here: https://who.is/dns/srv01.codefusion.technology
The codefusion.technology domain name is owned by Denuvo GmbH as indicated in the registrar here: https://who.is/whois/codefusion.technology

[AssassinLV]

How was that even figured out..... As I couldn't get that info from IP side it self...

[Soul]

Welp,hell no is all I can say,back to sims 3

[Xautos]

This is what i was looking at and now there is a more indepth bit of analysis going on about it. I am curious to see where this goes and how far it goes.

[AssassinLV]

Welp updated my script - now I launch it like this:
Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope Process; .\quick-check.ps1 -processName "inZ*"

(Link somewhere above updated with latest chat :) )

Fingers crossed that devs will not include this ...... in final product...

Either way - for now it's confirmed that Demo does indeed have Denuvo.

[Captain Flappy]

Jayd の投稿を引用：

Hang on, Denuvo? In a [bold]single player game[/bold]?

Is this game is trying to self destruct days before launch? It's bad enough the devs dropped the ball with the idiot restrictions thread, but now they are putting rootkits on our computers?

It's mostly single player games with Denuvo...

[Xautos]

AssassinLV の投稿を引用：

Welp updated my script - now I launch it like this:
Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope Process; .\quick-check.ps1 -processName "inZ*"

(Link somewhere above updated with latest chat :) )

Fingers crossed that devs will not include this ...... in final product...

Either way - for now it's confirmed that Demo does indeed have Denuvo.

Now there is no longer any doubt about it. These last few posts from you reinforces what the OP has said. Yhis is all i was looking for when i questioned the OP on the issue. as i mentioned i was look for some proof, while the OP put something up about it on page 1, an active example of it like this just sinks my doubts altogether.

I'm glad to see the truth has been found in all this, transparency is what we all wanted.

[NicShadow_IT]

lukaself の投稿を引用：

AssassinLV の投稿を引用：

Ok, deleted the only folder which was created after 21st...[...]
New IP found: 54.246.63.78[...]

Here it is. That's the IP address for srv01.codefusion.technology as indicated here: https://who.is/dns/srv01.codefusion.technology
The codefusion.technology domain name is owned by Denuvo GMBH as indicated in the registrar here: https://who.is/whois/codefusion.technology

Boh I tried who.is for that address and its Amazon Technologies Inc. for me.
https://who.is/whois-ip/ip-address/54.246.63.78