VMProtect 3[.]9[.]6[.]rar

resource
unpack001/VMProtect 3.9.6/VMProtect.exe

resource
unpack001/VMProtect 3.9.6/Lib/Net/VMProtect.SDK.dll
unpack001/VMProtect 3.9.6/Lib/Windows/VMProtectDDK32.sys
unpack001/VMProtect 3.9.6/Lib/Windows/VMProtectDDK64.sys
unpack001/VMProtect 3.9.6/Lib/Windows/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/Lib/Windows/VMProtectSDK64.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/BCB/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/BCB/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/Delphi/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/MASM/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK64.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/MSVC/bin/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/MSVC/bin/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/MSVC/bin/VMProtectSDK64.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/MinGW/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/MinGW/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/Net/bin/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/Net/bin/VMProtect.SDK.dll
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/VB6/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Code Markers/VB6/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/KeyGen/DLL/Lib/KeyGen32.dll
unpack001/VMProtect 3.9.6/VMProtect/KeyGen/DLL/Lib/KeyGen64.dll
unpack001/VMProtect 3.9.6/VMProtect/Licensing/BCB/TestApp.exe
unpack001/VMProtect 3.9.6/VMProtect/Licensing/DDK/bin/i386/TestApp.sys
unpack001/VMProtect 3.9.6/VMProtect/Licensing/Delphi/TestApp.exe
unpack001/VMProtect 3.9.6/VMProtect/Licensing/Delphi/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Licensing/MSVC/TestApp.exe
unpack001/VMProtect 3.9.6/VMProtect/Licensing/MSVC/bin/TestApp.exe
unpack001/VMProtect 3.9.6/VMProtect/Licensing/MSVC/bin/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Licensing/MSVC/bin/VMProtectSDK64.dll
unpack001/VMProtect 3.9.6/VMProtect/Licensing/Net/bin/TestApp.exe
unpack001/VMProtect 3.9.6/VMProtect/Licensing/Net/bin/VMProtect.SDK.dll
unpack001/VMProtect 3.9.6/VMProtect/Licensing/VB6/TestApp.exe
unpack001/VMProtect 3.9.6/VMProtect/Licensing/VB6/VMProtectSDK32.dll
unpack001/VMProtect 3.9.6/VMProtect/Scripts/Delphi Resources/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Scripts/Environment Variables/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Scripts/External DLL/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Scripts/Random Section Names/Project1.exe
unpack001/VMProtect 3.9.6/VMProtect/Scripts/Script Events/Project1.exe

VMProtect 3.9.6.rar

SHA256 6a4d6336a210575b315c6a65e610f80bf53c25c251d30cf4c72af8852a1861ba
MD5 ecc50363ba971f574bab2b6e35a88cd8
SHA1 d1960fdac91e484c93f5e73970fef57ca04aaf02
SHA512 5f2292fa956ac2e0108b90f52264a672a6f76b1641a0b342c34d89b65879950696e798838cf207fdb3c7db18a12c4cf99b42c68068242e3e0602a1fa5cc474a0
SSDEEP 786432:bhjiuIfl4w+iROuS5zYcKyL9NAh51ea1DJy02BJMEQB60:1ji1lznS5zsy4h58Ab2Y/o0
TLSH
T1208733C23A3BB87E84F321D49D51EE22D75234920772BD3A7546E7C421A2BCB87D254B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Ciaey.NET.txt

SHA256 ba61a2a7a625af90cd35f67c3514d964985a2e1337f35a0e1506b6d25783dc9c
MD5 bb51c118500d59f64b9cf53f8cced624
SHA1 9235ebdcaca23ee89a2aac9df7f4bf06404e46d0
SHA512 a26e9a1224354a4f1e7d4553fbec19aa265e8b8d2da94a676b795e1edcf75537cda058de1c06303dcc042d6e7f297c3cd983b134608e108115bbbeff38e74012
MD5 SHA1 SHA512

VMProtect 3.9.6/Help/.en/_23.cfs

SHA256 fb5438a535701f7251e07c3f3f27ae9babcc60401c8bcd1bc73ccd0c8c5d17dc
MD5 f1d1795555de9d3d474368dc25188e6c
SHA1 3eb75e39d66fee747595a5a1ec8a27708d5a15e4
SHA512 9b73158a968fc5304b114882cc801122c31e652f58295afe2fd476beb1a5eaa27e3acdc57485c1e11cb0c2bd274d57e6709fc944497c06b72bed5983859ab149
SSDEEP 3072:3eQAt8RDAp+2xQiaickZF0h79Dz7UXKhp:xpRDe1xN0h79DzwXgp
TLSH
T1A3A33A43E03334D3FE45017386679A0A37A1B3876E63B34A6ABD5368DB231C64FA2557
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Help/.en/deletable

SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
MD5 f1d3ff8443297732862df21dc4e57262
SHA1 9069ca78e7450a285173431b3e52c5c25299e473
SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
MD5 SHA1 SHA512

VMProtect 3.9.6/Help/.en/segments

SHA256 2556818e0166daad36798db31118c575eed8d94821b1b86d68124f52e034e418
MD5 7f9f3cb4b9d87551c4e9641f6863cb6a
SHA1 dd8d1f3b3fddf3a110dcd923155ee36a2f48bf0c
SHA512 f2a5c236e6e083d494ba389c7a455f0b254d1ca147b05f450888b0dcd7fad120071fa23ff8d6d517cdca23b089fc61aaf068d1b367788357383d3a4ffaeedaac
MD5 SHA1 SHA512

VMProtect 3.9.6/Help/.ru/_23.cfs

SHA256 f0eeef2b608350db06c14d3c0b5eb42bc98132fd9ce11e47624bc1247aed1420
MD5 e4576691785b3f9d83f5c84987327262
SHA1 fe08f128659f9d9a075ef6ca3e8db7026e490496
SHA512 6e7533f7a8abe8762a06ffd0a66ccf90938736b9b34a53fee023ecc9cce289a287ab87394a90244ef74cb8c004dbd631becf11378beccb2d757ca4e16129b066
SSDEEP 3072:wS+czGzAP1DETy0wWWEB9bPwmkWQLPYahDYMcpIpJpmev4aQv2yqK:DpzrTuBlQLHuIseVc2m
TLSH
T180E31B32D02BB5CDEC0024A7C8252A053E9663BF7F976366167CFD78B6B35848D39246
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Help/.ru/deletable

SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
MD5 f1d3ff8443297732862df21dc4e57262
SHA1 9069ca78e7450a285173431b3e52c5c25299e473
SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
MD5 SHA1 SHA512

VMProtect 3.9.6/Help/.ru/segments

SHA256 7912213e2f08c8fb5f93d364ba0d439009f9bb1fc431afa379a0ef0af99a703b
MD5 cb971d50169c23cd4f1a3160679f5948
SHA1 91a8cb4655aa499ba8a8c9b4b2c7b330c3ea2bb3
SHA512 ae9b9e1c7e3fdb16e7a68457b92efb06e2027a5d404e5e9cff90c616ad8d078c9066ca9c44d61ce25af6426201171761ece136da38f13331403c9d75c71c6e1a
MD5 SHA1 SHA512

VMProtect 3.9.6/Help/en.qch

SHA256 90e9c80c8466e6132bb3d28d17e0abf29d9e88c9ff986f84a64e0f9bbcee9e83
MD5 da523c2da049d556f937dcc84d061e0d
SHA1 a8e7830b4acdc4208ca88d80b2122467b331b6b3
SHA512 2e76fc241cd0756f10d7b79fc290263143bae8d4725ab2e601553d8a6f9d6537de6c9e64b595c4894fa8e102bb093199b3f740c06a6c1d2587c1aff6b37d4483
SSDEEP 24576:mpbpXVUXyDT0f6I87HCoot6wzmdqZ4RpFlHP9f7dhBt0zMklqIBHZN3elaWn0gjb:xiMf8HIxmR15hBqzFHH30aWnLGH0B
TLSH
T105752341874BBE1BF78B4634B83A1611DD33363DD122E229611DCA9D6070BA611F9FAF
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Help/en.qhc

SHA256 65a16d0730b9420fa5a29ba307d3cc68acf4b5982219ff672cd6654c15ffae75
MD5 0db44fa8ed3ade67aa2c4716e50921ed
SHA1 a38f757ca1aa45238445e030640f4c11c2c243c2
SHA512 397c71bc662cf1e7e24fe01b21b0fc4c2c2955b66c1a51dd19892bc2ea5af126e237fb29d248f99ee54fa15eb1110f1b92333f1b47f8aa623459f2b4f7990354
SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbgl284IqmmTxXHiedmX/pyLXrmUNmXM:gHn3qUqeRF/u+dd62xIqmmTMeWQmUmM
TLSH
T1D9F1C2D64B1A7536FED2C1B7F41252351D38228E0073C8F568AE63AB08535869A5BCFF
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Help/ru.qch

SHA256 c49c4e0105d4753b2ab1af70f9631dcdedf023bc09299076a7d79988a818b627
MD5 b98c9fcec78dfffe1d3e13cb022f1eb4
SHA1 eb9fc3d200cf9fc04d0b406a5a806d08743fcc8c
SHA512 3c1f46b1a9da157a410e81d0b2a1fc5718b56d63c84a9434e0d245e03ddeda0fa0860b0774dfbab41b98f98559ed5f62dbf2a47a1df30d45057f01b0764463de
SSDEEP 24576:epQp/VZ2kFSDQeohDV/goxG4HjsELPeaUhQqIFabsnFLHfOGbH8LgvzP+sahM4ls:J2aSMeohhHsp1IFaonjbcLAzP+ZOzt7
TLSH
T173753300B30AF422E7CB1A3C55236B76AEBDB53D5596E217325CC8ED60B4B06907C8DB
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Help/ru.qhc

SHA256 b386d55fa0acef53870bea201468b8393361f09bd828a242f7bf9d3c19327740
MD5 aa37fe2a672fc1fca01d291f253ff6da
SHA1 b5f709c03c17f0c1b48656a685884dde31352f97
SHA512 d6a8a989eb82917b672350e9b741808fd68ad277802588fa260f16d259d9d8811e084e820d0a26d29e7312bd84258da66ce727c0b866aa820933b273411c9ed7
SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbn2l284IqmmTxXHiedmXLTyLXrmUNmXM:gHn3qUqeRF/u+ddnQ2xIqmmTMeWOmUmM
TLSH
T133F1E2D647197432FED2C1B7F40252351D38228E0073C8F169AE23AB08535869A5BCFF
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Include/ASM/VMProtectSDK.inc

SHA256 9d41f7bf8f220e721e34f54665db9b63caca9ea00fc650f81492736a196f731e
MD5 a8c48a4a96b59b8bb464223cc5a7c66f
SHA1 19c91906b42228e7c03c872fc3e2ceca2ed73658
SHA512 121b00dbc539a9597235e7b44eb7aeb773daaa06e19cf48a44aa0ff935dba2e5cd1de5ac7585696744a9ea06918e775f649fbed32c01fa862d4cb112fe08dffe
TLSH
T1B44112068509768FC0A345B6BAA5AC50BE9BF91113FCCA6B60E50803134752CE7BDF9B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/Include/C/VMProtectDDK.h

SHA256 e98615fe5506da30061c63a3c6a3b1dfd23892f783d1aa6a9e4fe891a59f2283
MD5 28f7681c7317ba191dcc8bf36a6f6455
SHA1 917c2fadc5e6ce96d52d0a2ca20e5436ec83d90f
SHA512 6fea13ca6a2c55817ca968cec02df016b9d66f99f1dea71734d9de02170aa1817e7ac69f631810d5af25eccab298e4df89f5a2e59ec9ffda16247615c08bd41f
TLSH
T15561BD410D01306ED192D7F56737DC6225ACF12335F6EDEB220A24151BC354DABAEAAF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/Include/C/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/Include/Go/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/Include/Go/vmprotect.go

SHA256 b5bc56cfb0a1a9d14773c688f191a744a8df82571f857bafff3ed534dc9185ee
MD5 7466ecfb21aa217fdea7bca78eb8dd96
SHA1 0ee1a95058559da83e015415924f5bb788a3cbd0
SHA512 561afece7a5ad346046ad23dd477fc72762a0e5e1eadc902d4d656788c1fd30ac004db9da3dfef2ad1e9bcbaa7093a19fbfb1689040e4bd63d9811947335feb8
TLSH
T1B55114422693A10ED1D213552635F9907CC6F12256F7C1ABB1CC42E5B3AA1587B3C67A
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/Include/Pascal/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Include/VB6/VMProtectSDK.bas

SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
MD5 30d0ac58f09ba02d81dde6ea9067b582
SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
TLSH
T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/Langs/de.lng

SHA256 5c56a15e90fcb124be61cc3ba06384016361023e56d35379f08395c1ef2eeac6
MD5 7e20bccae3756a760ad009e5b446a568
SHA1 636c7ae3d78d3c6ef4bbdd8fbad3ec771a58d078
SHA512 a864b6d52a13fd8e4f56809535b2dabf1fceac2bb3ed375a013e02c09a319f47cd70a2ec5bc5a229fbd4247e2a66afd76b9dfea4691283560aa13698abda773b
SSDEEP 192:UQmLI/xiNfj1J5CUGvJ1D4XRYIe9kZ4vPs52dzxLGk3HfVUH/EuULNP9sPRY1zex:r83IqhY7eZ2zxLGkPe6spvDXF
TLSH
T1DF3208150E08628FD3D32BB67540C86B37B4C36917B020A3088CE3E75B97D7D9B6E596
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Langs/en.lng

SHA256 f5c9bacd8f85ac4348e5bd32fa4d2fc85afdaaea58c357bc0136a0806649422b
MD5 22531da3e31d4dcef333554553d2325c
SHA1 a2fa02b336cd6386a445662bff54cf3f73461560
SHA512 67a5fd9e66b57ab5c5927f213aa3530b7ba563316a3abb71bc4ce28b0c54a609b3f00091d4bd718f9f24b32098e6cf20ca1724a51d8dc4b0e2d7fcff2be5d36b
SSDEEP 192:rORjTHv17nwN71QIgWSeaDNVsJG1EDN6uXxjw2UkVH/bvohKVKeElDt7deAnaR70:a/Hi95S/DnsJG2DMSxjw2U0uuAnaR72h
TLSH
T1DA22B50D2704629715D301B7BB528CA3A7B5825C6674020718ACE7E827E7D3CEBBBAD5
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Langs/fr.lng

SHA256 b35d3bab6a63e8191340b9b18a5ed5e0eb86fe65f9dfe9d17696839a102314e3
MD5 eee0c8e57a4d0a3dcfb1bcbf50e5b9b9
SHA1 cb1d6cdf7ce3433a706f436e7cfd3770b01ebe11
SHA512 f759b0c77e7392d2e7842372027bf174218b536d7e23d229bbab30b0f558c4b30711e826a3f28b4c372334a493af1453d13e9f910f1ba153e30fb0b0f5a60193
SSDEEP 192:aj2o6S4kp87L1NG3Ck2dM0x10NZapGYx1MvvWmPyYNNtPAhcy+LVS9n2rfgiXl87:IT3b2+08TY1MGmPyYa+h4nIoiV80S5
TLSH
T1BD32B50EBA80614763D312F7B552D527A638C2547A19F2064CC8A7E863EFD3CD38F999
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Langs/ru.lng

SHA256 d440e0994921253b5ca88e244eb697aa3967c6f396b2f668de489fcad43b89bd
MD5 dcc3d1a7d77407c5505ebd737b78a64b
SHA1 607f517f198885eace13cbbd2cad7238a7047fe5
SHA512 be2b910f377cd1a1de6a9299990546e28f1ab6a9dd01ea5d378adc2a9d214b93796a84dd68989acf1c02953b5fbdad27ec1a3016888141213f07a910b3b9d5f9
SSDEEP 384:Xr2mIZLqvf0Vu7Ebi0FxF71Ki4aRkjEPve4AN8V3rsr92OQqa4k:Xr2q7SxFRRD+92OQz
TLSH
T14AA2F34FFAFC5114B5B6DA40AF3189D206EAB7102B19C0DD86CF2C5A1478AB477227E7
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Langs/zh.lng

SHA256 39ff0ffe1532ed801b8ca99ebf8bc7566b2dd5b4b18645e2319c5da796b110c5
MD5 de13bbcc687ad3762a073f102b99e95c
SHA1 a3a721d5c610fe0ee5f6eb60ea6c97f291bbf2d4
SHA512 a4bc69f4bc419008d4d86eef4ecf32ddd5c285fe18571c81d62a8bc99e2feec6471ad156a783b7aabe5851bcc826ef1be79d1ad304a80ed9a2ff18ec620649a4
SSDEEP 384:ENm0bnMYC5qftk8ns3CMUitEJURa2RBaOzI/9XPZO:ENmUI4n8CMQiRdzI/9XPk
TLSH
T18A52540127FE6019F6F79F98EAB894564BBBBC261E1DC12D95C4404E18B1E808A777F3
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Lib/Linux/libVMProtectARM64.so

SHA256 00aecc09e863c526c691b8b5c2fbb513a8f48b763fd18225015318a756e32656
MD5 57a740a420b55397b7facc447995a73a
SHA1 49e3e7b24ec32aff2004e4087e2e3bf5b3e53f86
SHA512 d11fc0fbc04dd466ab6ae6d14ca49f52f0bd09b126f0313a11a7548c77e77b2b197594549ede836d8a6114a47576da932cb2f08a381da94241b398d79676bee8
SSDEEP 768:aDECFjDjCiM0e8AJ5+IsZ2eLORxrz+4CAbdP2QW1:W/jDjzTAJ5+tZHqfEAbdeP
TLSH
T1B903B706EB80EE2FC4DD5374656B4F6413318018939FE757A12502956E933CEAFAE2CB
MD5 SHA1 SHA512 SSDEEP TLSH

linux aarch64

VMProtect 3.9.6/Lib/Linux/libVMProtectSDK32.so

SHA256 7e73d0a80d90db432a87e6daf075ad2add7cead3918c6025094fa8df8ade7f0c
MD5 1e619078dd43b175f220e37b9ed824c5
SHA1 f915a98d0a7134694a2de1efe244135ff909fc7c
SHA512 be6eeb90cd18bc0d097293f94be631714b4985420dd21be5e703efdfbe8c427a4c2d650557a1508b53683d5bc053c677a3dd08d03a326ac64cb1ea017e2fe8e0
SSDEEP 768:1q6qsfBcgboedwWi4W1TDzRW/tX17g3VMx:IsWgbobJv1DRW/aC
TLSH
T1F7E21947AF84A93AC4C60575126BCF191336C0724EB2CF53B62847645E933CDAEA728F
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86

VMProtect 3.9.6/Lib/Linux/libVMProtectSDK64.so

SHA256 5bd072d40820b70383a059bb0a8ace695fcb3e526a643dd21d0528b5b9b0f5e4
MD5 7fb8f3b45b0432477f5fd1e21a8c1673
SHA1 531691a33c1ee41d31c4bffcc7a66172c02bab62
SHA512 fff085406ad2b0f858bad3a7c546c621cff91252a169e44ebf91af9ab62586a352894c5cedb402dad21044fbccae4fa0d26d3f8209c987fca68a64f7c50dd311
SSDEEP 384:luE6TFC8ojUq3MUibTD4LO3U9f3sXVTbpgK+gxo/A4/o3i3tbzMRaOdm2xN:lL6TapAD4LOsJKFob/Ai3tbaaEvN
TLSH
T12F031A47AF84EE3FC4ED4371A55BCF5C1330A05087A6D71B221482A42F577CD6EAA28B
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64

VMProtect 3.9.6/Lib/Net/VMProtect.SDK.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 774ac5f0e7f795ba41cf4ff3ce09e3a2670b862831083778a4140894e4f1d125
MD5 396ac889c048603a575d05541f1c1311
SHA1 061834b997aaf5c3e629e0a0fb9afb099f15f2a7
SHA512 d55198bdcf80ea29c850c9f12c911bf81f44510874678293ac921601e457c9d060011d780881bb3a6108d5a754f519ab270bf02628bdb1ed63092d49873b03b9
SSDEEP 96:SbeBWY8lNW5lleUWbgjaJvbdI8cH4YJNSscbNVOz8RpFxrPOPXCr3c7+AsLtFSVF:EY8zWUUOgjSjR+JxzwFxrxA88
TLSH
T10F22B712B3E8A156F5FB67356D7211310BB7BA994A72CE3F148C010F0B37A546BA0B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/Lib/OSX/libVMProtectSDK.dylib

SHA256 d335780968e5e8742ebd8f748fb2ec372c4f1a5922cfc0fd64c15dc8921be41f
MD5 4250f8ab6e2f6594779a511c69964a22
SHA1 fb86ba0a222a1f382a62822e966fc44607560d33
SHA512 9c9b13d974f1e38a587ea1b0fd761b91a2cc69b26e752b0102ee11c97cf9a8945f8bebc07966b42b86b1ab407373abf9b048a046365a5bff7b1272869292be17
SSDEEP 768:gC3w0MnwZI1l1d4x02QsiURWO9aSIlpJ73IKaQfF19YR0WwMykBGetF5+ss24d6u:VKnwUhz38y24dpt
TLSH
T145C3F917EB05A427CA8D90F4929FCF6AB035F16011B7C763B661D1682FA67883E5680B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:arm64 arch:x64 arch:x86

VMProtect 3.9.6/Lib/Windows/BCC64ELF/VMProtectSDK64.lib

SHA256 b1262e6e80f3bb34ccd4270ec9b9d040fce9e85ee5f07c86b48f8c86e0417359
MD5 c8741887d6a3e009abbfa2402218b0bb
SHA1 6c0c3707bbf1819f656ca3697f1dba270db1dbe2
SHA512 1ceacd9c489a7b993869a7dfdcb44323e8dd1907b16aeb8beba95ad408a72f23f7fe1417b775dcd7007a83733e9a8c8d739c66a1276129b08e7e1d7ecd4aa4ee
TLSH
T17751FE1C8981392FC4F690F93722DDB4B279804681F2C757710E63A08B633CF6B9668B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/Lib/Windows/MinGW/VMProtectSDK32.a

SHA256 2172b716a942408e94c6a2dc0d6c9ad1078e3388a748fd1a2a05b3c22086469d
MD5 85ec3bdcf59e7d18ec4e28f855c66fe0
SHA1 2eff7ac3eebba5fd7081ab2df964caefdca96ed0
SHA512 e4b199521f6d90ba1f9172872e97d51254040ac1ca0aeadf757051cf74aec63a81e118e89c58fd1cc9d196dc16aac2f115a9c6b06cc4fe32e245a7ebc91a152d
SSDEEP 192:f6gR08VksnJIAqDryMNNj3aNcsGI0BvMtun7j:1R0CoMFW3
TLSH
T12492D2B2B2925DCBD27241BD9647EF11273CF0E249A6DB33322C65610BD1D8A3EC2587
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Lib/Windows/MinGW/VMProtectSDK64.a

SHA256 074389443c148fb836c160df6bdd97ffa9a3615191098e9e5ca62b7db33cc225
MD5 eb5af2d49eec030fac96ebd4c19bac62
SHA1 e919f4260d07843d3995707254b70396273f43fa
SHA512 891baf622cfb96adfa6844903409a7c1d05456d0d62cfe6f85becdf0ea9b7ac0c28d579e0d6883d3b04a8f8e507d9ce727407ab890ea8faa61f43bd5971c40e4
SSDEEP 192:RuZGP2eTY6AfBZQ9MBiGZQUuK8tLjMKSA:Rm2
TLSH
T12682F1B2F2E25D9FD67181BE1656EF212B7CF0D20166CB27322C19210B96E863FC5587
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Lib/Windows/OMF/VMProtectSDK32.lib

SHA256 06497f7b7d9670bdc832506b00707eae521f310eaaa5998ec6f6f4bdfadc1e87
MD5 0e1a96050ea2afc299dc4d05a327b044
SHA1 0627d91000c0e06c4a8d8c80d257ffc709ceb688
SHA512 309518a1a6d23843f675d0e2173f0f85f5adc3049eed9b91b8cbe64796d8ab166ca0f9dc82c43c85102cdfa2b8e54978a459fe097486f2ead6557e00288e3f46
TLSH
T1BA71373A19513A6FC4E390FA2A56CD9AFAB471D51AF1C573A7A111BF0F2E08C372504B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/Lib/Windows/VMProtectARM64.dll

SHA256 95c36dbc84fde8674c4d47c68f2a0a575e92ba136fb54100bb14ec680cabad8d
MD5 18d63414f1f53d12cc74287106e40e7b
SHA1 96abc1e430d9fa4b8e7c0bc230b5ad63d44253ad
SHA512 a376bce05866cf84f1e656d379e75fcf9ad7dd4910a5667b44d5441f10885625674c0c07b307abcd89d86182efca14b305fcb565945995a57d3066f118d60aa4
SSDEEP 1536:XBUJ1mU+JN4aJK0gHLhAJoei31yskAT+CRQJTv7sWv0dPgy:XBUv6N7K0+h4G5k1TleP9
TLSH
T1A4B35C53B78D2807E1E2DB38F8574F50633FB97484248E4AB202425CDD97BC99F769A2
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Lib/Windows/VMProtectARM64.lib

SHA256 25c325113cc4802eee53555a38cf6a176eb0b37c7db08a5af29db2c67159b5a1
MD5 b494ffa5646ca6ebe73cb5ba9e83996e
SHA1 dae1cb854e6b672b3638e1dde69e7e4ceaf6a8b7
SHA512 c11bf9a3fa910948bf16ae636a84bfe7d29b1b49e072e8f4b6ccdeec0a6de26140f198c46c3253e9b85349346e1576294531fffdccb0504a6c9d6a521e2bea3b
SSDEEP 48:9ZN/k5RLRzRCRXB6cI15AXy/F/CRcRj15T17RLRyIBrJX4CKsyAOL9Kfp5qK/MpX:9PkqBi1bruCKdK6K/MWTbrno
TLSH
T1A1E1B9365950BC2FC4EAC0F93B62DCA4396D004602F2D47BB28D269243B275F67C368B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Lib/Windows/VMProtectDDK32.lib

SHA256 c57c4aecb44fecb050bb2cb41fda40e43c1ac9317460e89b09a7793020a70a9f
MD5 8808bdf95e8182f712897c9d0354a4b5
SHA1 c99e48bc4196244900ffb7fe03e51a93e12e544d
SHA512 891d31248e8e50b3fa64ce0c7d4f2e3e4ae399ac285bdcd30f2bfba4090b576a851124a318f41322f96bf1e9dcd588dcc7ec3324543006c3d85d06f77a4bb4a5
SSDEEP 96:Ekm/+uYlVlCKU3v/hknv/KzKyK578G9ZQu+:DVlG/h2fgbh
TLSH
T111F1AD376892BE1FC5F6C4FAF292DC983E2C344A02F5EA77701D418153BA5AD679A007
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Lib/Windows/VMProtectDDK32.sys

SHA256 5ba9aef8e17fd89a3a70e767878f099a9ed6d96b7fd83459864334cbbf401e7f
MD5 941f10363ef51c84a3076414d9430844
SHA1 b8724661b462a7df052a2c392cb7e18662162227
SHA512 35508e8a74a36ce6f7ee73cc1129c97ba42f8aec219ac20243f043a157c0744351a711bfd2ac6956b8fb88a8bc219ab7768f1912446072522dee4901add17009
TLSH
T15D5177068951763FD0DA81F93B66CC263438410153F6C3D7972107256B813DF3A3958B
MD5 SHA1 SHA512 TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/Lib/Windows/VMProtectDDK64.lib

SHA256 3e795303f1226cfaa7106116ed913ceac8e44b962d61435bf04b5d3c0462e575
MD5 8edc8488ecea779cb3fa811b67baea49
SHA1 a04d04050f1afe5f1c4d47b4fe3cedd420855011
SHA512 5821fac2b0d297b095261798c51bb50adf39d6b86a4d9ce015220335d63e050a3c00cca8557ef8b780afac57f133c0827701e1f5087fd0640e2b22f9367ef29c
SSDEEP 48:zZj/k5RLRzRCRXB6cI152Xy/F/CRcRj15T1sRLRyIBr/X4nKryAOjgKp35PKiRRb:zNkqB41CrgnKpKvKiObctJrH
TLSH
T1C0E18B395891BD0FC5FAC4FA7B22ECA97B9D104102F5E96B340D8B51836276FA387207
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Lib/Windows/VMProtectDDK64.sys

SHA256 6fde44b1b4c3e54f779938e49d3fd316baaa32dca241ac1459bb17a71f9c8dc3
MD5 b7108a75e768f7537ef1c2a441390e0d
SHA1 5673aef3246241d2100d0a48183343e547852a83
SHA512 a453e52e092afb337eb9f367db746c39e482a29209c7d7c5305d0b22c1baaf3669a7b83bff8efaae5d5419b997e4e5a1b11ac8ed44d65d9e05aafa4cbde13bd6
TLSH
T1C581DF02958135BFD4CA48F93BE2EC553678001953F3C1D7975217261B427DF323954B
MD5 SHA1 SHA512 TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/Lib/Windows/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 6e59aef45a255799f550c09b6e52d7ae6e28e3af21414c6b11bc2e3091f352c5
MD5 4879172129a41fa9d51a8a68beacc71d
SHA1 63278e71360d6d1fa3a05d86de01946e2ec93da3
SHA512 1a2d2e329903b9f2b5f1401885ccd5c1fe64c92505bcfb8842825d58b498e9fbf249843951dc25d121fe8751c595cc8bdff0b9fda00149ffd60cec9f01b3f908
SSDEEP 1536:TB3bkLmdI52QC2mCYKw2cr2RhX4cSxpnnDw2C1+XroJQusWMIcdwIYXowGF:fhQC2mCYK3RhIcSDnk2byMJwIYRG
TLSH
T1E4A36B10B4D1C432E0BE19380535D5A15B3E7830EF64AD9F73941AB99EB42D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/Lib/Windows/VMProtectSDK32.lib

SHA256 6ff60abf1d453e0fefcd0ce0530556e229bf87079225e0c8a584fa16256d6853
MD5 8a4aba73d1eba6c5ac080e958d936937
SHA1 a397bd91f409b757e971571ca98a30b5b4a91300
SHA512 2b7fd093db797bf8ca05212393b8d4b152f55e6f4768bc8ebdba264ce09250888a29f572402b623c1c857a8e3e6b5e9b6aa64d6108cc6ac7b825f48af1bfd999
SSDEEP 96:pCm/+uYlVlLKU3A/hknQbK4KXK+teBcfGxkGzguz:cVlU/hpi1PQ
TLSH
T1C7F1463B18A23E2FC4FAD0F9F292DD99352C304604F6E667716D44D223AE58E679B107
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/Lib/Windows/VMProtectSDK64.dll

IMPHASH 1851ff453adce0cef5274e320d5bed3c
SHA256 ec3235136a4daee2a6f72c0f2994a8365ca8427c8068d068130b74c9fa64cd02
MD5 c0ce8c981bda19d2be17aca0774d9df1
SHA1 895052a42efa50043f473f072578bee69be8d2f8
SHA512 1578948dba2492263c0b174816451218c70df89e6b4440981db9513c664d97f6253fc1c0dab4164c620b9cb7794f4789677a0c38e0a5ac9636aee1dbc3d16062
SSDEEP 3072:0RcqYHq7Aiytzg2ScpvgJcLYsqYX6UDdyBo:K0Hq7AiyegZgJoZXBa
TLSH
T171C35B47B3E540BBD1B6C679CD234A56D3B678150B249BAF07A402162F233D18E3AF72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect 3.9.6/Lib/Windows/VMProtectSDK64.lib

SHA256 9997a9c6e179010450385832a66ea36938e180fc9067d91fd6aae7c9f6bf4d18
MD5 6e597e4be8eb765dcfd4b058c463bb7b
SHA1 4eda19892928cf64c4e3e9a9e9e4c533ec70230f
SHA512 3895946dedbf25f5ab279370d3315ed93b5d09ec35789a2721f6b7b0717faf06d0d02659e682d592113f77dd8fe70f4739952588b50c4124535968550aebcb99
SSDEEP 48:lZ5/k5RLRzRCRXB6cI15gXy/F/CRcRj15T1tRLRyIBrzX43KXyAOUMKnFS5vKas5:ljkqB61xr83KIKFGKaWdlmkArg
TLSH
T128E1763959E17D2FC6EAC1FA7B21DCA97E6D404101F7E46B308D4BA2432A65FA347207
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect.exe

IMPHASH 06194f1e32d2d7e9839b5b324cb96f0a
SHA256 e57a095ba23f59ed0364693adf730c3be16d46fda1b0a0d24d43498afe1f2e51
MD5 54373f55c886595f36606121d7a5f34c
SHA1 25993a59df26b7aaf5390fe026090e9b6f1df413
SHA512 ed533ff599a8854d473e11cd57880f7b74669c1be367b3d63a732fc74ec0e232a2c1886472cc6d447260c357b316e34fb129f21c57f9a031314314713577186c
SSDEEP 786432:cnOdy3k5En6Q4RaqwLR2ITNktGTTASjimIWpGyg:cUy3aCFqWR2BtGSlWpGyg
TLSH
T17B7722D76CE446ACC49AC631D28A0BFDD2D97D984D76181B7BC628012E33D63DCF2926
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

a6:89:18:a5:c0:ec:13:79:48:4c:50:f1:52:99:33:73:59:e4:23:ff

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d

Chains

Jun 19, 2025

CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d

Serial Number

07:25:df:15:2a:5b:89:92:f3:68:49:ae

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 23, 2023 - Jun 17, 2026

Minor OS version

2

Major OS version

5

Entry point

89229852

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

16.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

20.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

239KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

932KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

13B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.qtmetad

Size

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.H;%

Size

Virtual Size

15.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.f^\

Size

512B

Virtual Size

264B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.=i?

Size

33.1MB

Virtual Size

33.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

339KB

Virtual Size

338KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Code Markers/BCB/Project1.bpr

SHA256 159aeb90d8312faced21545f128e1175f7858edf455a9ebc8d06b15b61b5a97f
MD5 c4f092473b8764d59c497d3d6dde218a
SHA1 6851e7e83efd0ea0195040a0f80e96f02d4a3452
SHA512 f1d12bf106012dadc045ac4c8c8f168308e2209b1c00486e560968eefe37e6439ba7e9b8b8319ec05775959d8acf98aa9febb72188060ec19e23be59d45b32a7
TLSH
T1E8817212A5C8CD42B3796C5235026E48F95ECA8B00204CAD35D4A4AF1FBFC7B623B52F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/BCB/Project1.cpp

SHA256 cbee2dab09546ee539d7c1b6e6d788a8c9181044957788b4dfbcd45f6d4977c8
MD5 fffbbb4cf4620d71ae9037ef29370fd2
SHA1 9b5403b0e1272f69bef82a71be47fa9f542ca158
SHA512 fc20feafb9fef17e3bb291ef378d0701697acfa35f50407cf3fe6d09440078a2971e8803e14bfd3a740141166be5bd54fb8385113578515996d1c9da24cfacea
TLSH
T152116D9AAD5585A392B3E6BA03365180EABB967F0FD20112F68C91189FF1169C14FF42
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/BCB/Project1.exe

IMPHASH 532c62395891b8320957c654d6524f07
SHA256 ad0876324839c5098ece43c8cd1f6ccca9bc1746045c167a8f4d3b4ce255e60a
MD5 c2343e61f464d18099f748d49ed292f6
SHA1 ba0614de2b0c3dff2f1a06096d7ae8a4bfa3c1c1
SHA512 0a795f34fc10d98c9a9a43c236d60c6dee2639ba646ac58c4f6a1055c704c5393435ee8df543c07216ba64c8ab39845f52c65723d419c8d254e6c552b882bef6
SSDEEP 6144:0s8xf99OJHuf9iJ3KutaCF1fdlCTEg4N5flQSMh:0NOJHoMKJCFVRQSM
TLSH
T13F244B32FA59CC3EE06245782B6D6A3294765930AA88D253F3E45F4CBDF61D0631A31F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8316

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

vcl190.bpl

@Vcl@Consts@initialization$qqrv @Vcl@Consts@Finalization$qqrv @Vcl@Graphics@initialization$qqrv @Vcl@Graphics@Finalization$qqrv @Vcl@Graphutil@initialization$qqrv @Vcl@Graphutil@Finalization$qqrv @Vcl@Toolwin@initialization$qqrv @Vcl@Toolwin@Finalization$qqrv @Vcl@Printers@initialization$qqrv @Vcl@Printers@Finalization$qqrv @Vcl@Stdactns@initialization$qqrv @Vcl@Stdactns@Finalization$qqrv @Vcl@Comstrs@initialization$qqrv @Vcl@Comstrs@Finalization$qqrv @Vcl@Extctrls@initialization$qqrv @Vcl@Extctrls@Finalization$qqrv @Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv @Vcl@Extctrls@TLinkLabel@$bcctr$qqrv @Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv @Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv @Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv @Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv @Vcl@Stdctrls@initialization$qqrv @Vcl@Stdctrls@Finalization$qqrv @Vcl@Stdctrls@TStaticText@$bcdtr$qqrv @Vcl@Stdctrls@TStaticText@$bcctr$qqrv @Vcl@Stdctrls@TListBox@$bcdtr$qqrv @Vcl@Stdctrls@TListBox@$bcctr$qqrv @Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv @Vcl@Stdctrls@TCheckBox@$bcctr$qqrv @Vcl@Stdctrls@TButton@$bcdtr$qqrv @Vcl@Stdctrls@TButton@$bcctr$qqrv @Vcl@Stdctrls@TComboBox@$bcdtr$qqrv @Vcl@Stdctrls@TComboBox@$bcctr$qqrv @Vcl@Stdctrls@TMemo@$bcdtr$qqrv @Vcl@Stdctrls@TMemo@$bcctr$qqrv @Vcl@Stdctrls@TEdit@$bcdtr$qqrv @Vcl@Stdctrls@TEdit@$bcctr$qqrv @Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv @Vcl@Stdctrls@TGroupBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv @Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv @Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv @Vcl@Stdctrls@TScrollBar@$bcctr$qqrv @Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv @Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv @Vcl@Stdctrls@TRadioButton@$bcctr$qqrv @Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv @Vcl@Stdctrls@TCustomButton@$bcctr$qqrv @Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv @Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv @Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv @Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv @Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv @Vcl@Stdctrls@TButton@ @Vcl@Stdctrls@TEdit@ @Vcl@Stdctrls@TLabel@ @Vcl@Listactns@initialization$qqrv @Vcl@Listactns@Finalization$qqrv @Vcl@Comctrls@initialization$qqrv @Vcl@Comctrls@Finalization$qqrv @Vcl@Comctrls@THeaderControl@$bcdtr$qqrv @Vcl@Comctrls@THeaderControl@$bcctr$qqrv @Vcl@Comctrls@TStatusBar@$bcdtr$qqrv @Vcl@Comctrls@TStatusBar@$bcctr$qqrv @Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv @Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv @Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv @Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv @Vcl@Comctrls@TPageScroller@$bcdtr$qqrv @Vcl@Comctrls@TPageScroller@$bcctr$qqrv @Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv @Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv @Vcl@Comctrls@TCoolBar@$bcdtr$qqrv @Vcl@Comctrls@TCoolBar@$bcctr$qqrv @Vcl@Comctrls@TToolBar@$bcdtr$qqrv @Vcl@Comctrls@TToolBar@$bcctr$qqrv @Vcl@Comctrls@TListView@$bcdtr$qqrv @Vcl@Comctrls@TListView@$bcctr$qqrv @Vcl@Comctrls@TCustomListView@$bcdtr$qqrv @Vcl@Comctrls@TCustomListView@$bcctr$qqrv @Vcl@Comctrls@THotKey@$bcdtr$qqrv @Vcl@Comctrls@THotKey@$bcctr$qqrv @Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv @Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv @Vcl@Comctrls@TUpDown@$bcdtr$qqrv @Vcl@Comctrls@TUpDown@$bcctr$qqrv @Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv @Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv @Vcl@Comctrls@TRichEdit@$bcdtr$qqrv @Vcl@Comctrls@TRichEdit@$bcctr$qqrv @Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv @Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv @Vcl@Comctrls@TProgressBar@$bcdtr$qqrv @Vcl@Comctrls@TProgressBar@$bcctr$qqrv @Vcl@Comctrls@TTrackBar@$bcdtr$qqrv @Vcl@Comctrls@TTrackBar@$bcctr$qqrv @Vcl@Comctrls@TTreeView@$bcdtr$qqrv @Vcl@Comctrls@TTreeView@$bcctr$qqrv @Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv @Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv @Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv @Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv @Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv @Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv @Vcl@Comctrls@TTabControl@$bcdtr$qqrv @Vcl@Comctrls@TTabControl@$bcctr$qqrv @Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv @Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv @Vcl@Dialogs@initialization$qqrv @Vcl@Dialogs@Finalization$qqrv @Vcl@Dialogs@MessageDlg$qqrx20System@UnicodeString26System@Uitypes@TMsgDlgType54System@%Set$t25System@Uitypes@TMsgDlgBtn$iuc$0$iuc$11%i @Vcl@Menus@initialization$qqrv @Vcl@Menus@Finalization$qqrv @Vcl@Imglist@initialization$qqrv @Vcl@Imglist@Finalization$qqrv @Vcl@Actnlist@initialization$qqrv @Vcl@Actnlist@Finalization$qqrv @Vcl@Controls@initialization$qqrv @Vcl@Controls@Finalization$qqrv @Vcl@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp21Vcl@Controls@TControlr19System@Types@TPoint @Vcl@Controls@TWinControl@UpdateTIPStatus$qqrv @Vcl@Controls@TWinControl@DockReplaceDockClient$qqrp21Vcl@Controls@TControlp24Vcl@Controls@TWinControlt119Vcl@Controls@TAlignt1 @Vcl@Controls@TWinControl@SetParentBackground$qqro @Vcl@Controls@TWinControl@CanAutoSize$qqrrit1 @Vcl@Controls@TWinControl@AssignTo$qqrp26System@Classes@TPersistent @Vcl@Controls@TWinControl@UpdateStyleElements$qqrv @Vcl@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1 @Vcl@Controls@TWinControl@CanResize$qqrrit1 @Vcl@Controls@TWinControl@GetClientOrigin$qqrv @Vcl@Controls@TWinControl@GetControlExtents$qqrv @Vcl@Controls@TWinControl@Repaint$qqrv @Vcl@Controls@TWinControl@Update$qqrv @Vcl@Controls@TWinControl@Invalidate$qqrv @Vcl@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__ @Vcl@Controls@TWinControl@ShowControl$qqrp21Vcl@Controls@TControl @Vcl@Controls@TWinControl@SetBounds$qqriiii @Vcl@Controls@TWinControl@SetParentDoubleBuffered$qqro @Vcl@Controls@TWinControl@CustomAlignPosition$qqrp21Vcl@Controls@TControlrit2t2t2r18System@Types@TRectrx23Vcl@Controls@TAlignInfo @Vcl@Controls@TWinControl@CustomAlignInsertBefore$qqrp21Vcl@Controls@TControlt1 @Vcl@Controls@TWinControl@CreateHandle$qqrv @Vcl@Controls@TWinControl@DestroyWnd$qqrv @Vcl@Controls@TWinControl@$bdtr$qqrv @Vcl@Controls@TControl@InitiateAction$qqrv @Vcl@Controls@TControl@GetFloatingDockSiteClass$qqrv @Vcl@Controls@TControl@CreateTouchManager$qqrv @Vcl@Controls@TControl@SetBiDiMode$qqr24System@Classes@TBiDiMode @Vcl@Controls@TControl@GetText$qqrv @Vcl@Controls@TControl@SetEnabled$qqro @Vcl@Controls@TControl@SetName$qqrx20System@UnicodeString @Vcl@Controls@TControl@SetAutoSize$qqro @Vcl@Controls@TControl@SetDragMode$qqr24System@Uitypes@TDragMode @Vcl@Controls@TControl@GetAction$qqrv @Vcl@Controls@TControl@GetEnabled$qqrv @Vcl@Controls@TControl@GetDragImages$qqrv @Vcl@Controls@TControl@$bdtr$qqrv @Vcl@Themes@initialization$qqrv @Vcl@Themes@Finalization$qqrv @Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv @Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv @Vcl@Forms@initialization$qqrv @Vcl@Forms@Finalization$qqrv @Vcl@Forms@TApplication@ShowException$qqrp25System@Sysutils@Exception @Vcl@Forms@TApplication@Run$qqrv @Vcl@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv @Vcl@Forms@TApplication@Initialize$qqrv @Vcl@Forms@TForm@$bcdtr$qqrv @Vcl@Forms@TForm@$bcctr$qqrv @Vcl@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv @Vcl@Forms@TCustomForm@RequestAlign$qqrv @Vcl@Forms@TCustomForm@UpdateActions$qqrv @Vcl@Forms@TCustomForm@ShowModal$qqrv @Vcl@Forms@TCustomForm@SetFocus$qqrv @Vcl@Forms@TCustomForm@CloseQuery$qqrv @Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState @Vcl@Forms@TCustomForm@PaintWindow$qqrp5HDC__ @Vcl@Forms@TCustomForm@SetFocusedControl$qqrp24Vcl@Controls@TWinControl @Vcl@Forms@TCustomForm@DefaultHandler$qqrpv @Vcl@Forms@TCustomForm@DestroyWindowHandle$qqrv @Vcl@Forms@TCustomForm@DestroyHandle$qqrv @Vcl@Forms@TCustomForm@CreateWindowHandle$qqrrx26Vcl@Controls@TCreateParams @Vcl@Forms@TCustomForm@CreateWnd$qqrv @Vcl@Forms@TCustomForm@CreateParams$qqrr26Vcl@Controls@TCreateParams @Vcl@Forms@TCustomForm@AlignControls$qqrp21Vcl@Controls@TControlr18System@Types@TRect @Vcl@Forms@TCustomForm@ClientWndProc$qqrr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@WndProc$qqrr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2 @Vcl@Forms@TCustomForm@SetParent$qqrp24Vcl@Controls@TWinControl @Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@SetParentBiDiMode$qqro @Vcl@Forms@TCustomForm@GetFloating$qqrv @Vcl@Forms@TCustomForm@GetClientRect$qqrv @Vcl@Forms@TCustomForm@DefineProperties$qqrp21System@Classes@TFiler @Vcl@Forms@TCustomForm@ReadState$qqrp22System@Classes@TReader @Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation @Vcl@Forms@TCustomForm@Loaded$qqrv @Vcl@Forms@TCustomForm@DoDestroy$qqrv @Vcl@Forms@TCustomForm@DoCreate$qqrv @Vcl@Forms@TCustomForm@$bdtr$qqrv @Vcl@Forms@TCustomForm@BeforeDestruction$qqrv @Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponenti @Vcl@Forms@TCustomForm@AfterConstruction$qqrv @Vcl@Forms@TCustomForm@$bcdtr$qqrv @Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponent @Vcl@Forms@TCustomForm@$bcctr$qqrv @Vcl@Forms@TScrollBox@$bcdtr$qqrv @Vcl@Forms@TScrollBox@$bcctr$qqrv @Vcl@Forms@TScrollingWinControl@AdjustClientRect$qqrr18System@Types@TRect @Vcl@Forms@TScrollingWinControl@AutoScrollInView$qqrp21Vcl@Controls@TControl @Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4% @Vcl@Forms@TScrollingWinControl@DoGesture$qqrrx30Vcl@Controls@TGestureEventInforo @Vcl@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv @Vcl@Forms@TScrollingWinControl@$bdtr$qqrv @Vcl@Forms@Application @$xp$15Vcl@Forms@TForm @Vcl@Forms@TForm@ @Vcl@Clipbrd@initialization$qqrv @Vcl@Clipbrd@Finalization$qqrv @Vcl@Mask@initialization$qqrv @Vcl@Mask@Finalization$qqrv @Vcl@Grids@initialization$qqrv @Vcl@Grids@Finalization$qqrv @Vcl@Grids@TDrawGrid@$bcdtr$qqrv @Vcl@Grids@TDrawGrid@$bcctr$qqrv @Vcl@Grids@TStringGrid@$bcdtr$qqrv @Vcl@Grids@TStringGrid@$bcctr$qqrv @Vcl@Grids@TCustomDrawGrid@$bcdtr$qqrv @Vcl@Grids@TCustomDrawGrid@$bcctr$qqrv @Vcl@Grids@TCustomGrid@$bcdtr$qqrv @Vcl@Grids@TCustomGrid@$bcctr$qqrv @Vcl@Buttons@initialization$qqrv @Vcl@Buttons@Finalization$qqrv @Vcl@Buttons@TBitBtn@$bcdtr$qqrv @Vcl@Buttons@TBitBtn@$bcctr$qqrv @Vcl@Categorybuttons@initialization$qqrv @Vcl@Categorybuttons@Finalization$qqrv @Vcl@Categorybuttons@TCategoryButtons@$bcdtr$qqrv @Vcl@Categorybuttons@TCategoryButtons@$bcctr$qqrv @Vcl@Buttongroup@initialization$qqrv @Vcl@Buttongroup@Finalization$qqrv @Vcl@Buttongroup@TButtonGroup@$bcdtr$qqrv @Vcl@Buttongroup@TButtonGroup@$bcctr$qqrv @Vcl@Styles@initialization$qqrv @Vcl@Styles@Finalization$qqrv @Vcl@Styles@TStyleEngine@$bcdtr$qqrv @Vcl@Styles@TStyleEngine@$bcctr$qqrv

rtl190.bpl

@System@initialization$qqrv @System@Finalization$qqrv @System@UTF8ToUnicodeString$qqrpxc @System@FreeMemory$qpv @System@@CheckAutoResult$qqrl @System@UnregisterModule$qqrp17System@TLibModule @System@RegisterModule$qqrp17System@TLibModule @System@FindHInstance$qqrpv @System@@DynArrayRelease$qqrpv @System@@DynArrayAddRef$qqrpv @System@SetAnsiString$qqrp27System@%AnsiStringT$us$i0$%pbius @System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$% @System@@UStrFromPChar$qqrr20System@UnicodeStringpc @System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$% @System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus @System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius @System@@LStrInsert$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%i @System@@LStrDelete$qqrr27System@%AnsiStringT$us$i0$%ii @System@@LStrCmp$qqrv @System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2 @System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$% @System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus @System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius @System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus @System@@LStrFromWChar$qqrr27System@%AnsiStringT$us$i0$%bus @System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$% @System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString @System@@LStrFromPWCharLen$qqrr27System@%AnsiStringT$us$i0$%pbius @System@@LStrClr$qqrpv @System@@UStrClr$qqrpv @System@@HandleFinally$qqrv @System@TObject@MethodName$qqrpv @System@TObject@MethodAddress$qqrx20System@UnicodeString @System@TObject@MethodAddress$qqrrx28System@%SmallString$iuc$255% @System@TObject@Dispatch$qqrpv @System@TObject@ToString$qqrv @System@TObject@ClassInfo$qqrv @System@TObject@InheritsFrom$qqrp17System@TMetaClass @System@@FindDynaInst$qqrxp14System@TObjects @System@TObject@UnitScope$qqrv @System@TObject@UnitName$qqrv @System@TObject@GetInterfaceTable$qqrv @System@TObject@GetInterfaceEntry$qqrrx5_GUID @System@TObject@GetHashCode$qqrv @System@TObject@Equals$qqrp14System@TObject @System@TObject@InitInstance$qqrpv @System@TObject@$bdtr$qqrv @System@TObject@InstanceSize$qqrv @System@TObject@FreeInstance$qqrv @System@TObject@NewInstance$qqrv @System@TObject@ClassParent$qqrv @System@TObject@ClassNameIs$qqrx20System@UnicodeString @System@TObject@QualifiedClassName$qqrv @System@TObject@ClassName$qqrv @System@Set8087CW$qqrus @System@Reset8087CW$qqrv @System@SetRaiseList$qqrpv @System@RaiseList$qqrv @System@IsMemoryManagerSet$qqrv @System@SetMemoryManager$qqrrx23System@TMemoryManagerEx @System@GetMemoryManager$qqrr23System@TMemoryManagerEx @System@DefaultSystemCodePage @System@IsMultiThread @System@IsConsole @System@ExitProc @System@CmdLine @System@IsLibrary @System@MainInstance @System@ExceptionAcquired @System@RaiseExceptObjProc @System@ExceptObjProc @System@Types@initialization$qqrv @System@Types@Finalization$qqrv @System@Uitypes@initialization$qqrv @System@Uitypes@Finalization$qqrv @System@Sysconst@initialization$qqrv @System@Sysconst@Finalization$qqrv @System@Internal@Excutils@initialization$qqrv @System@Internal@Excutils@Finalization$qqrv @System@Rtlconsts@initialization$qqrv @System@Rtlconsts@Finalization$qqrv @System@Character@initialization$qqrv @System@Character@Finalization$qqrv @Winapi@Shfolder@initialization$qqrv @Winapi@Shfolder@Finalization$qqrv @Winapi@Imagehlp@initialization$qqrv @Winapi@Imagehlp@Finalization$qqrv @System@Sysutils@initialization$qqrv @System@Sysutils@Finalization$qqrv @System@Sysutils@TOSVersion@$bcctr$qqrv @System@Sysutils@TEncoding@$bcdtr$qqrv @System@Sysutils@TLanguages@$bcdtr$qqrv @System@Sysutils@Exception@$bcdtr$qqrv @System@Sysutils@Exception@$bcctr$qqrv @System@Sysutils@Exception@$bdtr$qqrv @System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString @System@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi @System@Sysutils@TOSVersion@$bcdtr$qqrv @System@Sysutils@TEncoding@$bcctr$qqrv @System@Sysutils@Exception@ @System@Sysutils@TLanguages@$bcctr$qqrv @System@Math@initialization$qqrv @System@Math@Finalization$qqrv @System@Timespan@initialization$qqrv @System@Timespan@Finalization$qqrv @System@Timespan@TTimeSpan@$bcctr$qqrv @System@Timespan@TTimeSpan@$bcdtr$qqrv @System@Varutils@initialization$qqrv @System@Varutils@Finalization$qqrv @System@Variants@initialization$qqrv @System@Variants@Finalization$qqrv @System@Strutils@initialization$qqrv @System@Strutils@Finalization$qqrv @System@Ansistrings@initialization$qqrv @System@Ansistrings@Finalization$qqrv @System@Rtti@initialization$qqrv @System@Rtti@Finalization$qqrv @System@Typinfo@initialization$qqrv @System@Typinfo@Finalization$qqrv @System@Generics@Defaults@initialization$qqrv @System@Generics@Defaults@Finalization$qqrv @System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv @System@Generics@Defaults@TStringComparer@$bcdtr$qqrv @System@Generics@Defaults@TIStringComparer@$bcctr$qqrv @System@Generics@Defaults@TStringComparer@$bcctr$qqrv @System@Diagnostics@initialization$qqrv @System@Diagnostics@Finalization$qqrv @System@Syncobjs@initialization$qqrv @System@Syncobjs@Finalization$qqrv @System@Syncobjs@TInterlocked@Increment$qqrri @System@Generics@Collections@initialization$qqrv @System@Generics@Collections@Finalization$qqrv @System@Classes@initialization$qqrv @System@Classes@Finalization$qqrv @System@Classes@TObserverMapping@$bcdtr$qqrv @System@Classes@TLoginCredentialService@$bcdtr$qqrv @System@Classes@TLoginCredentialService@$bcctr$qqrv @System@Classes@TBinaryWriter@$bcdtr$qqrv @System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2 @System@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv @System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver% @System@Classes@TComponent@CanObserve$qqrxi @System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction @System@Classes@TComponent@GetObservers$qqrv @System@Classes@TComponent@$bcctr$qqrv @System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter @System@Classes@TComponent@$bdtr$qqrv @System@Classes@TThread@$bcdtr$qqrv @System@Classes@TThread@$bcctr$qqrv @System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent @System@Classes@TPersistent@$bdtr$qqrv @System@Classes@TBinaryWriter@$bcctr$qqrv @System@Classes@TComponent@$bcdtr$qqrv @System@Classes@TObserverMapping@$bcctr$qqrv @System@Uiconsts@initialization$qqrv @System@Uiconsts@Finalization$qqrv @System@Actions@initialization$qqrv @System@Actions@Finalization$qqrv @System@Win@Comconst@initialization$qqrv @System@Win@Comconst@Finalization$qqrv @System@Win@Comobj@initialization$qqrv @System@Win@Comobj@Finalization$qqrv @System@Win@Comobj@TComServerObject@$bcctr$qqrv @System@Win@Comobj@TComServerObject@$bcdtr$qqrv @System@Contnrs@initialization$qqrv @System@Contnrs@Finalization$qqrv @System@Dateutils@initialization$qqrv @System@Dateutils@Finalization$qqrv @System@Dateutils@TTimeZone@$bcdtr$qqrv @System@Dateutils@TTimeZone@$bcctr$qqrv @System@Masks@initialization$qqrv @System@Masks@Finalization$qqrv @System@Ioutils@initialization$qqrv @System@Ioutils@Finalization$qqrv @System@Ioutils@TPath@$bcctr$qqrv @System@Ioutils@TPath@$bcdtr$qqrv @System@Inifiles@initialization$qqrv @System@Inifiles@Finalization$qqrv @System@Win@Registry@initialization$qqrv @System@Win@Registry@Finalization$qqrv @System@Win@Registry@TRegistry@$bcctr$qqrv @System@Win@Registry@TRegistry@$bcdtr$qqrv @System@Maskutils@initialization$qqrv @System@Maskutils@Finalization$qqrv @System@Helpintfs@initialization$qqrv @System@Helpintfs@Finalization$qqrv @Winapi@Msxmlintf@initialization$qqrv @Winapi@Msxmlintf@Finalization$qqrv @Winapi@Uxtheme@initialization$qqrv @Winapi@Uxtheme@Finalization$qqrv @Winapi@Flatsb@initialization$qqrv @Winapi@Flatsb@Finalization$qqrv @Winapi@Multimon@initialization$qqrv @Winapi@Multimon@Finalization$qqrv @System@Widestrutils@initialization$qqrv @System@Widestrutils@Finalization$qqrv @System@Zlib@initialization$qqrv @System@Zlib@Finalization$qqrv @Winapi@Wincodec@initialization$qqrv @Winapi@Wincodec@Finalization$qqrv

kernel32

CloseHandle CreateFileA DeleteCriticalSection DeleteFileA EnterCriticalSection ExitProcess FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetCurrentThreadId GetEnvironmentStrings GetFileAttributesA GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetUserDefaultLCID GetVersion GetVersionExA GetVersionExW HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LocalAlloc LocalFree MultiByteToWideChar RaiseException ReadFile RtlUnwind SetConsoleCtrlHandler SetFilePointer SetHandleCount SetLastError SetThreadLocale Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualQuery WideCharToMultiByte WriteFile

user32

EnumThreadWindows MessageBoxA wsprintfA

vmprotectsdk32

VMProtectBegin VMProtectDecryptStringA VMProtectEnd

Name

.text

Size

153KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Code Markers/BCB/Project1.exe.vmp

SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
TLSH
T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/BCB/Project1.res

SHA256 d979175c5d319a18b6869aab66e7f036702c3b12ae261caeffb5781c51092f50
MD5 04b3152f3bbd6f31b02a6d5c33888108
SHA1 c5f4faa609c5ba129157e25a9abf4d096a46c574
SHA512 daa0bc4fc6a0ad9b65b94a629cc9c54df74874af7956a20077fdb666eff4edfcca04f9ec03c557dc1f47e03620ad078d5c418a716324b8a1cb50515f93d9d886
TLSH
T1EF116D1AB324E869F511D23E9507439B486BDC708B198ACB75623EEE2D317C04DB62D8
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/BCB/Unit1.cpp

SHA256 7dc64405f2554a75d1f33cb5686c2b9e409c50feddb08f07f9536f8ffa6cbd3e
MD5 9a10a95c8143636fb07fe30d1016f95d
SHA1 ecc3c6e91209b174d377c8e4e49c49ca592535ef
SHA512 4ca557b71ccf88193dc7ccda0eb6a99a33df8f1b374fefe17c503ea1a09e85c6b4d3806f95d50aba158982a3f2127d5e6a2a054527807a75e6f39d61f580aaff
TLSH
T1BE114C145E0D50228270E5BC67128C28DA6C90301BF7E972B19F55C66FD458AA75FB43
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/BCB/Unit1.dfm

SHA256 b0484b042439b2d65940bb249f6ed47d57f7bcbe1ca744899312da19e43f373c
MD5 b304338a6585400ac91169dc87ed13aa
SHA1 02254a098fb3f58b8e03bf4c8ca118f1a95ea5fe
SHA512 5cb9d7a2ed4fc54bd0f0ef55bbae35e0a49759c2ef32da64d0f65cc5ec3f93dbfcb688fe115b3de392544cd5619e6e0de26cbffa94a92bff991aa015b7cf3bb8
TLSH
T17211AB7C5A28A21828B3E51345AB1D4CE4662D230107AC2177D3CCDCBFF5D16F7A6752
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/BCB/Unit1.h

SHA256 aabf2dc07320d8a344276ad446541291936d413051f12e5bb41e4edeb0c5f2db
MD5 78566d57e206237ed2ce4eb92df559ef
SHA1 54f149dd0f9a562e2d62e0be2625e980e2223909
SHA512 ac647425a83494d6434f7cd718da6e846710fe806153e33405520ad46d83076da154d253dde393f2d6d66b8afab0567893c31349cf05607751ec8f952657ee91
TLSH
T16E1124785FAC8171C031F13AD7039422E3AFE1B557D6A826707E14E65F90142238F799
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/BCB/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/BCB/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/BCB/VMProtectSDK32.lib

SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
TLSH
T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Project1.dof

SHA256 fcca360abf95da036c46aca01f7180bde9d7d85c929d020a5285a274c4822bbb
MD5 7385f06f0dfd8a50b23d9c0dca0265e0
SHA1 8708de14e394b42d8c04eba66916d2ddac502c69
SHA512 d2534114b628c98f0c0f0c2af9f6ea9a71392d933a45dda411b21225069dcf670977928150c56dc47cda4b65528e4413b6115af552fe6e4f9b13f633e71f791a
MD5 SHA1 SHA512

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Project1.dpr

SHA256 3859798d9f2b6040c2c83de7c3dc2a2fa8710fdde49ce5bb13d5122e2a1b55b1
MD5 d843a7f42f9ff957481d274f4af11235
SHA1 51ac86a1545fdc2726134fc4bc178b29e599105d
SHA512 4bcbdf611902c319cdd93cd3b32a654b076d26f59d8244ddad172337fe8a1c1e370e7e06bb9e4f9d54fef013bafc8160cd2d622b2565690da747f08f2a7ed191
TLSH
T1DEC012DB27ED80C3BAF665B6350E44806462C53C4C81535935B5D8664405759CB13365
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Project1.exe

IMPHASH 1e7575186edecf060e4585f8bc74203f
SHA256 a14c1e75ce36821ecd80e4525c888c9d58e80a23a8a5f6ebe9923f6a33d93e7d
MD5 fcdd67939f856f8bcfc404bb5f706ec7
SHA1 758d14e6d838e12d2c1e52f65594a91dbe744f4b
SHA512 18be594c08513e005840d9af00174edb021fda635e5331528310f72fcfce20938edef99965ccf0039ec0283500239642bb6ff6809ef797c79f6c4c5ba1a6aff2
SSDEEP 24576:FiRfWQHP2VPwHgzDe/EMdwBmSPk96vBL/5YSnrnS:AWHPISVZ9YSrnS
TLSH
T151156C13B392173FC136163AC96792A05C3B7A102E965856DFF4CD8C1FF92A12C3AA57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

769096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW RegCloseKey

user32

LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetClassLongW SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CreateAcceleratorTableW CopyIcon CloseClipboard ClientToScreen CheckMenuItem CharUpperBuffW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrcpyW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc TryEnterCriticalSection SwitchToThread SuspendThread SizeofResource SignalObjectAndWait SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile RaiseException IsDebuggerPresent MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryW LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTickCount GetThreadPriority GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateThread CreateFileW CreateEventW CompareStringW CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW Chord BitBlt Arc AbortDoc

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CoCreateInstance IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

vmprotectsdk32

VMProtectDecryptStringA VMProtectEnd VMProtectBegin

Name

.text

Size

741KB

Virtual Size

741KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Project1.exe.vmp

SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
TLSH
T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Project1.res

SHA256 649865f23f2dad52f1426f68a62cd6325e1d6956d2a24e94e7955d35c9c0494b
MD5 0449e63e988a4abab210048b5717d71c
SHA1 42c36a7f1e04bb4c55bc5e9483e9fde64cffbbff
SHA512 f7be79e58b20c661021ef715b7d96fcd5b064ef9ffe13992983765b507717bb6586efc40cf165fd885fe187b77a6cbdcdb82c17ccfa0d0cd1378eea5fc1dd7fa
TLSH
T1291181266384E198C00A43B0D4439EDC2171E869AD3CA9D7E8F2FEFF7E2451535039B4
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Unit1.dfm

SHA256 e308c46a00ea2a7bbb7e0c03a0b36f72fceebf4f4410654d63e28923c1508974
MD5 9baba524abcbd986ad6d445cd08c25d1
SHA1 5551ef1648ddc984f72fd2be459c2a557f8da45b
SHA512 9d4601c3a61750a73b79cd5a3f5d6a1f15a0304858d875f61e8e9fa1b5442fa2cdd8c24e487f0e46b367d41195a72d74ff8101de5466d98a5abe18eeb4076e3f
TLSH
T13811AB7C5A28A21418B3E50349AB1D4CE46529230107AC2177D3CCDCBFF1D16F7A6752
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/Unit1.pas

SHA256 ce1885abe0628e592850627757dbc96bcbe72fc64ee35059689def84c2c6898c
MD5 7f072fffb0ebdafa0fc16a4a86359bbd
SHA1 ad9ce2cd69e1015ea101af794f5b9d5468077605
SHA512 c6ecb7af017102646a1388fb82d8385117dc7f0507551db26888b68af19961f9e54e42598245468dd5b5bbb655efe666e54be2b72b0488d862acbe8c89d6be8c
TLSH
T11B01F1905BDBB51E4472D1BCB7174C43D9A8C02113AEEA8170A3A6C71F99C49575139F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Delphi/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/Project1

SHA256 d1951f724d2aa423bb2c29eae92069b676b33a7d0e9d371a45e1d942c4a28a8d
MD5 0f748d65e665cb249408a25694f1c016
SHA1 c31e8b9ef31986ccc0ea19abf337d3fe7b82f479
SHA512 2da9405d516aee9a9bdd8372013ad4b1dbc4f7b031703673b684e97194f4a1e1c5afa1c2bb84e5c339f839dd4ad71caaa60604742908d1ae74f729f1b5d5736b
SSDEEP 6144:oRy5S3+kZrUHMNsP96a2FAtzojOGV2Spqjj/Ig7t/H9WIBR8PEZIPCJRK:oRy5S9ZrUHMNY9sFAtcaG8jV5/RBR8PP
TLSH
T1FC743919FE43917FCA2340F982774A5A9B319135203096A7B7D8DE3DBE79D82B42CB05
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x86

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/Project1.exe

IMPHASH 31c9cdd1525221040f7f273b9a6216ed
SHA256 afda096738c0646e01a2b3d2c000fe48b80376ce8464be660764ed2004ba5de3
MD5 e524da8fbf47a18fbae7ba94943eb451
SHA1 3aae8e31b4f7f14cd607b48291546d1a3233aff2
SHA512 c0641d9f1a1778095bfbd6463bc35caeaa3d3bb7cc4350d3853b40c7d72ef13e969ec4627319e25d05bf22cc83443010b45153721118261ba2b3c12634e078f4
SSDEEP 768:aivdTUc6NCnV/mfVKo6fuTy005j5y29zwB8p5UzNve9a+ZxeN/X3GRsYjY2zgy0p:JnwfH0uGV5MNy0l/vv
TLSH
T105734D92FBC187BDCA465EB54B06C1A7A720F2313C35C16B72D80B2F96FA0D2557A781
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

64128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

vmprotectsdk32

VMProtectBegin VMProtectDecryptStringA VMProtectEnd

kernel32

CloseHandle CompareStringA CompareStringW CreateEventA CreateFileA CreateThread DeleteCriticalSection EnterCriticalSection EnumCalendarInfoA EnumResourceLanguagesA EnumResourceNamesA EnumResourceTypesA ExitProcess ExitThread FindResourceA FindResourceExA FormatMessageA FreeLibrary FreeResource GetCommandLineA GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetThreadLocale GetThreadPriority GetUserDefaultLCID GetVersionExA GetWindowsDirectoryA HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadResource LocalAlloc LocalFree LockResource MultiByteToWideChar ReadFile ReadProcessMemory ResetEvent ResumeThread SetEvent SetFilePointer SetLastError SetThreadLocale SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SuspendThread TerminateThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection WaitForSingleObject WideCharToMultiByte WriteFile

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

CharLowerA CharLowerBuffA CharLowerBuffW CharUpperA CharUpperBuffA CharUpperBuffW DialogBoxParamA EndDialog GetDlgItem GetDlgItemTextA GetSystemMetrics MessageBeep MessageBoxA SetFocus

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/Project1.pas

SHA256 2d27a9fbc0a15579f16e6f0cc224ba2445d732631a52aaa4365b08d54003bbe2
MD5 382555cff2f9e63e87a54ef6e32e26b0
SHA1 88ad854fa791a993eba1ad72f877e582a7e978bb
SHA512 7299dbc0a4f173b0f5b995275c22eb73adee486aa7b5bbec4fb4e33e9c10942aebc37cb09a1dcba9b58aafe612124b81dc0b160ef964e8cd69c004cd33217ce0
TLSH
T1C0310F60CD922ABAC570856837EEDC47CD3583039B75A2A4F55EA2E11F38CDC6510ECE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/Resource.rc

SHA256 baf821685adf4b9c75bd41460bd9622a665c83d9d53ac6b40d41bab4ea08cf07
MD5 ce2b6ee2db483e22c8a923677f2a6f17
SHA1 a76e9c9a9e1f89db8f9a298199044a8e5531bbec
SHA512 f01a8d31c5a673d7317663e65fe167901458a682e42d76203b243abd7c7b04aa23e5e494002b60f6bb00615f43bfa4b27e7bcba630256672dc79ee6eb2b7042c
TLSH
T19AE07D21D7413D1445C4F1E445AA9CE3B5D8E4A31F788B05B3EC001A17BBDC886B4133
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/Resource.res

SHA256 d07d83ad978cc0ed6a882d46d7be6093b5333c4243dda78e2c08aa156cd987bc
MD5 eda0430286b41b50ae8c55b2971a8873
SHA1 2a2b8ad34e4ff7f26240c851a53bb08e1954f139
SHA512 6c892b63e0c31dad601707e4f52bb3263594f855e669f4b99857d77dd0a903aefd41c1a63f48d9fbcf0bb77e48361cbccd8554f893a4666ff0cc71a45080e8da
TLSH
T176E02EA093B0C000D4738E788E72ABA23C6238010F30820A2620374F9032A44EA39300
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/makeit.bat

SHA256 2062ace492beeb520c23bc3617c66af0b3b822ad3c6c1baf4e6883ad0a7f879f
MD5 7c59610d2f4611980913211ad36375af
SHA1 ca86a95bf4bf72407f6ab2a15933402a451036c6
SHA512 c41a265d9713807c3a1abe1d9c7b66de70d27ed847b7cd5e3d1eb1edb972b3d3bfc47f9f570db15864db55ad315a5bc60b1c599a69289a70c7368cf4e7a813bc
TLSH
T146B012052D0D63C0FDCFCF6D887788405192F26F827083DA2511E2282D11380047899F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Free Pascal/makeit.sh

SHA256 1fb56c36d9d46a8cdad55d79839b9ac59a86d15df518800208957afb8a51efe4
MD5 49f4fda335793090271c10668c2da780
SHA1 e851f9b0d4bf6bbc5a8269cbe6d99938fbc271b7
SHA512 29e5ef7618375c8284ca217642b9ede6d57a273882fcacefa39104603778124512ee8e82220326db5fb00ae614f07ed20549bbaca9019d271dfde28172d11243
TLSH
T147A002442B88BB017BDEA710D156DE64F257355C6F228D7C10C9D29D24133819056597
MD5 SHA1 SHA512 TLSH

linux

VMProtect 3.9.6/VMProtect/Code Markers/GCC/Project1

SHA256 6bd7626d74b11df5a7b7b49b1a7a08ebe6f21b870c4493d50d53eba8036b879e
MD5 d9a7d8095dc2e48c9827a498debb9d9a
SHA1 ee7931c457468adb3cafd8f31b70753ff217174e
SHA512 2ec7468348f93c93a859bef5188e32377644c2fe411d5feea260f9c44590545935c1728e263bc1c06a2ed8457951bb03f1d7e3a40103d73be0585b3437f94b68
SSDEEP 48:xH35L/ifdnpgS4zgFjf1j7hQvTc1IkjaFET:xH3M0kFjff1njaq
TLSH
T16B02CE42A79C0A26D01CC778C0DA4FC6B261F5510EA69B0B1681D21C1F5B78E6975F4F
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64

VMProtect 3.9.6/VMProtect/Code Markers/GCC/Project1.cpp

SHA256 2ce737813b173564e00438e51221c70c1c5fb0d6d8834db74b16fab342c9502b
MD5 fcda868f2c07bad3618322a3b69e0337
SHA1 cc448dcd2a014d1f58ae70633d3d1cae207b3047
SHA512 fffd4d6a5e77fe9e0a0c817948170ff0d5f5380dd48bfa9d0349c64c560d96f1ec600ef0d8e0078629c3548d75343d1424449e254c4440df0f4c60b21ffc243d
TLSH
T1BEF05C54365C305BD261C1D82324CC28E34CD01322B6D6A2756320C52B66C4D86DA54B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/GCC/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/GCC/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect 3.9.6/VMProtect/Code Markers/GCC/makeit.sh

SHA256 8e19ce0f8d045ca709ac029631bd913c02ad5b3e95d9d792cd6d18a88eb4a0d2
MD5 f6a42f92cb10385709844a3cc9a03e65
SHA1 c3f626c5252457fcfffa93d82583a41bb9924a68
SHA512 7dfca41b6ed04b63219c73ae947867dc90c8935b8ae82018ba12275367644130ea4a07aa0c7b285fee0530554656dd43407f5c8a35a937897ae233a4470c6665
TLSH
T15BE02B241917837BB6DD9C8311204C70F78303E54EB0AEABD41AD455422D3470959D2A
MD5 SHA1 SHA512 TLSH

linux polyglot

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1

SHA256 ae0a22792b62dee33cc9328ff471b549b0967b33951cc385b43ad13c1582e0a6
MD5 4c4d34d37ff8ba71180424a7750ca87b
SHA1 34a841514f85db82f0ad2603a54811c115b1625d
SHA512 f7d41e00f34e87690e08c7e714ec35dd8dfa33cd2f4163638715686d24a2176c0ab816a3561b1d57baa2804e9e3e5dee50084689b179bae1f1597e5405eb66f3
SSDEEP 49152:MT1N0jDMi6MsYwdHunMk2zwRLK/yxpieGFvQUS3NCBvsGp+SJScZggFMnap+:ST0jD/6MsYwR8MkvLGyxFavlM
TLSH
T13A163C17B723C1ABCC331373855B26864A20D7157931AAAB72989DFC7F71E82782E705
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x86

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1.app/Contents/Info.plist

SHA256 997696a737a6a2f73dd415bc8c2403835f5473cccddce269d52f689bf028d7dc
MD5 070d580bc05bb0e96da27baa0e69bec8
SHA1 19bb4f96b99fa8eefacc21a83d9d06fcd219ab23
SHA512 5ef2eafb05ec8cfd26a58a6b34abec80979fb91e88387d7c51c1a8361fe628bfc6353006c608c855a20965d69d3db26ba46425b210f5361aac975a2f0856aadf
TLSH
T1C7217F6411D0E5190AB21BE7B39091598998F1CE9C7319F5FCCF6A431B2AE2617B3D12
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1.app/Contents/MacOS/project1

SHA256 248b21893a6d1774c26cb7f80bfd4a34c9a53a9a6f9dea439e1f0128cb54b71c
MD5 3b9a0cd3371451af3575b481117bd135
SHA1 ebb3fae4358017336e58997b09f19a8dee236646
SHA512 301205fd69d35f635986b59b0bf9fa2e9f740e7bb57a459818887a8c64068896f0df9cb7e5cc078e8bb3fa3eb626d9c92206413cd229333b7c8825b59c1e438b
TLSH
T116112230A020322CB280008C8F03CF88CF00CCB33A00AEE030BCC0323B0B0002CC0082
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1.app/Contents/PkgInfo

SHA256 c89b70392a33d313ca5ea1b45df1e368f86fdb83f653169d20ed84626d267373
MD5 3a332c31b8563c20caf0c6fe37c892b2
SHA1 836f6650f493f35a73d3f8d0780b3d5dd88342b1
SHA512 b0fc62807594b7ab404e783301e7c975ad43933984783e2d922e8d5cfd99d5e3a180eed0c487bd1cc965360c5dd71c6765f68f780dd2f5a25766459c204a8219
MD5 SHA1 SHA512

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1.exe

IMPHASH e78a5d103f3c1ceff54c4588d6a9ed5a
SHA256 864a8b0953fd38a64aa17123bf9e6aae62be534289dabe3a613959010485f44f
MD5 617d5d121653b7d87d30d32197e07a85
SHA1 b54a37291a8652043f6c3a817f724db2f1b19f64
SHA512 bb363dd86a438b431339440d006873896774a6eceb1ab7c5d3061951f00b354509680cf64b0c47d7b6acb731ab16d2016a0d37d8d215553d714e53a35c83d6ca
SSDEEP 49152:z7+3sUVt35XSsjXFxScIhTNKCbY072iWvQh:f+3sUVNXacIh4aV72iFh
TLSH
T198751C167722C11BCC632BF2874E468556A4E7643C30E9D731DC5EAEBB70B863E2A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1314096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

vmprotectsdk32

VMProtectBegin VMProtectDecryptStringA VMProtectEnd

comctl32

ImageList_Add ImageList_AddMasked ImageList_BeginDrag ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_DrawEx ImageList_DrawIndirect ImageList_EndDrag ImageList_GetImageCount ImageList_Remove ImageList_Replace ImageList_SetImageCount InitCommonControls

gdi32

Arc BitBlt Chord CombineRgn CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateEllipticRgn CreateFontIndirectA CreateFontIndirectW CreatePatternBrush CreatePen CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteObject Ellipse EnumFontFamiliesA EnumFontFamiliesExA EnumFontFamiliesExW ExcludeClipRect ExtCreatePen ExtCreateRegion ExtFloodFill ExtSelectClipRgn ExtTextOutA ExtTextOutW FillRgn GetBitmapBits GetBkColor GetCharABCWidthsA GetClipBox GetClipRgn GetCurrentObject GetDCOrgEx GetDIBits GetDeviceCaps GetMapMode GetObjectA GetObjectType GetObjectW GetPixel GetROP2 GetRandomRgn GetRgnBox GetStockObject GetTextAlign GetTextColor GetTextExtentExPointA GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextMetricsA GetViewportExtEx GetViewportOrgEx GetWindowExtEx GetWindowOrgEx IntersectClipRect LPtoDP LineTo MaskBlt MoveToEx OffsetRgn OffsetViewportOrgEx PatBlt Pie PolyBezier Polygon Polyline PtInRegion RealizePalette RectVisible Rectangle RestoreDC RoundRect SaveDC SelectClipRgn SelectObject SelectPalette SetArcDirection SetBkColor SetBkMode SetBrushOrgEx SetMapMode SetPixel SetPolyFillMode SetROP2 SetStretchBltMode SetTextAlign SetTextCharacterExtra SetTextColor SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx StretchBlt TextOutW

kernel32

CloseHandle CompareStringA CompareStringW CreateDirectoryA CreateDirectoryW CreateEventA CreateFileA CreateThread DeleteCriticalSection DeleteFileA DeleteFileW EnterCriticalSection EnumCalendarInfoA EnumResourceLanguagesA EnumResourceNamesA EnumResourceTypesA ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FindResourceExA FormatMessageA FreeEnvironmentStringsA FreeLibrary FreeResource GetACP GetCommandLineA GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryA GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetEnvironmentStringsA GetExitCodeProcess GetFileAttributesA GetFileAttributesW GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetThreadLocale GetThreadPriority GetTickCount GetUserDefaultLCID GetVersionExA GetWindowsDirectoryA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalLock GlobalReAlloc GlobalSize GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadResource LocalAlloc LocalFree LockResource MoveFileA MoveFileW MulDiv MultiByteToWideChar PeekNamedPipe ReadFile ReadProcessMemory RemoveDirectoryA RemoveDirectoryW ResetEvent ResumeThread SetCurrentDirectoryA SetCurrentDirectoryW SetEndOfFile SetEvent SetFileAttributesA SetFileAttributesW SetFilePointer SetLastError SetThreadLocale SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SuspendThread TerminateThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

ole32

OleInitialize OleUninitialize

oleaut32

SafeArrayAccessData SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SafeArrayUnaccessData SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeTypeEx VariantClear VariantCopy VariantInit

shell32

DragAcceptFiles DragFinish DragQueryFileA DragQueryFileW

user32

AdjustWindowRectEx BeginPaint BringWindowToTop CallNextHookEx CallWindowProcA CallWindowProcW CharLowerA CharLowerBuffA CharLowerBuffW CharToOemA CharUpperA CharUpperBuffA CharUpperBuffW ChildWindowFromPointEx ClientToScreen CloseClipboard CopyImage CountClipboardFormats CreateCaret CreateIconIndirect CreateMenu CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcA DefWindowProcW DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawMenuBar DrawStateA DrawStateW DrawTextA DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumClipboardFormats EnumPropsA EnumThreadWindows FillRect FrameRect GetActiveWindow GetCapture GetCaretPos GetClassInfoA GetClassInfoW GetClassNameA GetClientRect GetClipboardData GetClipboardFormatNameA GetCursorPos GetDC GetDCEx GetDesktopWindow GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyState GetMenu GetMenuItemCount GetMenuItemInfoA GetParent GetPropA GetScrollInfo GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId HideCaret InflateRect InsertMenuItemA IntersectRect InvalidateRect InvalidateRgn IsClipboardFormatAvailable IsIconic IsMenu IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadCursorA LoadIconA LoadImageA MapWindowPoints MessageBeep MessageBoxA MessageBoxW MsgWaitForMultipleObjects OemToCharA OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageA PostQuitMessage RedrawWindow RegisterClassA RegisterClassW RegisterClipboardFormatA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow ScrollWindowEx SendMessageA SendMessageW SetActiveWindow SetCapture SetCaretPos SetClassLongA SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetMenu SetMenuItemInfoA SetParent SetPropA SetRect SetScrollInfo SetSysColors SetTimer SetWindowLongA SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW ShowCaret ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenuEx TranslateMessage UnregisterClassA UnregisterClassW UpdateWindow WindowFromDC WindowFromPoint

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1.exe.vmp

SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
TLSH
T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1.lpi

SHA256 52d6481c992384f523e3191ebe9d4ea224af31d09177ffcde6cf56775c431257
MD5 e39837b19e1bc6b091ef06bcd5ba3fe2
SHA1 615686e071b902d70c67da9d934e4a1f0b8021aa
SHA512 10bcd876d5a7903611c323ad6dafa3aba160152b36b028cbc9a3ef62553109e4fa53419004fbae91066835d350ccb1dd8fe222c22e463a79e1b428d7edcdbd26
TLSH
T1C2615825A1C4CF2267B24E50B6514C62FE6DC3C703065862F44DB24B9FF7D6A10B7539
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/project1.lpr

SHA256 6e235ec419611d1a9873d5756879badbd333fb4899f19a955d2bd66015f8849d
MD5 f5ecac8124592980459bb503fa28609a
SHA1 3087569d0e9a478212d7e17af22f6925d0b268fe
SHA512 cb9f7167916889aac53dc4d7d43d557e29c6baa5465855358c688050748ce831d67ba40490d0394c44061e99401debb56f07cefc56b1d1dfa74436c0de517d71
TLSH
T1A3E020F75BFF80C2B97764F1120DD442289A523C0D4571C83964C05645095945613AB9
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/unit1.lfm

SHA256 f3f7b7f0b7aa902a8693199472055d447e62074f38fe8535f2d454c68b4d4e21
MD5 90cc94af0020da28d493e7e3df93f252
SHA1 96e5ba1491f0cee91c8e289737d3af0af23cc052
SHA512 53416e5a0718ca25784de35ac3c7eaf46a129499c9d82e7cdd4b434cbd4f43912ae9a9929d9b4e126d9cd5da471dba288d04aef016bc9b6ecaa35464d64fb24e
TLSH
T1C301AB7C1524A2195CB2D217A40E0D4CE87A69230103A82577C3DC99AFF5D16F791782
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/unit1.lrs

SHA256 07b139f6319b9ddff5e8f9a6cde42c45fa25682731c3ad536c11b7495e25ce6a
MD5 e05a41823a6f9274e292f0f314b99bac
SHA1 d778f18f255e6b57ecb7d0bd74edf23d19a0f83c
SHA512 4d937ce4e899d5e038da404de2f4a0d7554f9e8a6b26210b7e5919f1050c09cbec28903070c69ebbf90ae1a0f733cded7af7ced350b01b2e5d9ae1fa6e353773
TLSH
T1FF110E6A3E057111C224F2AAAB8F0C9F8A27442645D7A8A5AE92241BC9B310C94726F1
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Lazarus/unit1.pas

SHA256 805ba8ea754e6397852618ccc5d918c2b7ff13aeb2d619d22c442193c8ce4479
MD5 d4b210eb6015591a5ba5401d7f9ff88b
SHA1 8737c36033188385c8418a0bc0364b636a5a6bfd
SHA512 e06eb591347101ac8c8ab998bc343695c62d55ea5bb8fde130f517e7fce63e0d61ad0d26056b788c96c5e1760ecbe8cb6042b414699e260828155549f2b1d0a0
TLSH
T1D9110C505B9FA41B4132A1A8B6178C03EEA4C026169BEE81309759C20F99C4D1661B8F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MASM/Project1.asm

SHA256 14aeca4fc84a458acad8dfdf17dec3225f1c5f643e4fdfe01f83b3b322f2c527
MD5 6512c773a2e231cd33de8b0d8841dc61
SHA1 a75cc0a66296d297f357f3d1688afe5f49410999
SHA512 bf47017245efa19a79d6279055bdc45efd221cc92ec610a1c1ec49baeb33493e9be88f50baa255744ff6045478d8d154f111ceb5dac93b3b6175ca2b4c99fdb2
TLSH
T1C5515212851B051694F6B6023D536C0EE756A1237F71CF14390E8A911FB25AC9F237CF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MASM/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/MASM/Project1.exe.vmp

SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
TLSH
T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MASM/Project1.inc

SHA256 16bd1d6c40abc4bce77a50c3c1dea815aa3b424598fc49598470e84408427224
MD5 1ac1b09cfc5940d3794233a644d47f14
SHA1 59b3a3ee62bd1722d3c1967276563d5ff8c089f3
SHA512 c07547599daeede899be8d9275252505a993b15f933714196fd5dba38809f50e7d77b1ed2713586eaa272acd1da2d9a269fd7d96a7e58fe23082af15b91f984e
SSDEEP 192:Q4cqq9C1FchpceCzKEMyAbBeCUdPS3EE0IvCjs:7PKDCY
TLSH
T1B5E1BD0BED4D11543B35E5A13EBEA50BC39E201B3E87484A391C2766FF35689E39F618
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK.inc

SHA256 9d41f7bf8f220e721e34f54665db9b63caca9ea00fc650f81492736a196f731e
MD5 a8c48a4a96b59b8bb464223cc5a7c66f
SHA1 19c91906b42228e7c03c872fc3e2ceca2ed73658
SHA512 121b00dbc539a9597235e7b44eb7aeb773daaa06e19cf48a44aa0ff935dba2e5cd1de5ac7585696744a9ea06918e775f649fbed32c01fa862d4cb112fe08dffe
TLSH
T1B44112068509768FC0A345B6BAA5AC50BE9BF91113FCCA6B60E50803134752CE7BDF9B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK32.lib

SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
TLSH
T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK64.dll

IMPHASH 1851ff453adce0cef5274e320d5bed3c
SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
MD5 db4f1a1406d292162a3b99d1fbb74822
SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
TLSH
T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Code Markers/MASM/VMProtectSDK64.lib

SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
MD5 32599fe22a118732b9261e1fcd4f94fc
SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
TLSH
T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MASM/makeit.bat

SHA256 655f241e2cfa322de729c415b5c9c23103b240fdc51787155bf68f1dce39b3ce
MD5 af26b0b102187a1d8e57e5f65ad6286e
SHA1 40ccf43c0a7589e4d9c263cdf8952779ad77a4b5
SHA512 66d67b277942995ad9d6397590191519412a47e6e16db5f3bf88c9b280f03febe762af19c5f02cf392d4b07e006eb5a946f25d6d4801e6d82475a4b5fe488bd9
TLSH
T1A6319E56AC5EC2A6BFF4C44AAE1C4542F3031296657D2635F0FA98F7A801391373D50A
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/Project1.cpp

SHA256 e71347b15cc4f90e4197ba31b778fa59a66a580f9ccb982dea284d59934a10ee
MD5 22872e8577ad2268418a09cbaa607fc4
SHA1 4a00c54e043fc9fa75a01b0f6c1637733d1c5dde
SHA512 2f15be519cf715a7c744ce9e21a0f93c805ab8d9f24702f2ca58d1997e3d030fdd362919058cd3f57fa17a741edea0b4b5fddd609d4442847eefdf650f1f85f4
TLSH
T1A52140406A197C13E7B1028C2FF2DC08E73CA60317B590A9B5CED1E07F3A5958563F8A
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/Project1.sln

SHA256 f89dbe0fb20eba54f515445145200d66b2f5e0636b03a56b9a9a108b6d93ea1b
MD5 f6a26b03aba7554a22e98e46ceaa2ef2
SHA1 ba9716a9dacd27f72a9458c72583b76387b5b973
SHA512 4729a850471cb5ca36179419eff7a728237be1b64141c35d667d2cc80db1632299dc7b659c3f20301b3f0ec2f7ad58001504c8877e8a88960030e0be585adcac
TLSH
T1C911597D200F6ED2298A6A2FE9FC1DB2BF7353A0C26C393C1494E4499F23614C507487
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/Project1.vcxproj

SHA256 21ce6f9c53cdfcc4058ecc89675575bb8efd1a392985d21a3afbe0dc20eba37b
MD5 345471b40019f106e6515794118b4e68
SHA1 5fe26ccd179ff510f60faab2ce6a612fd37a61ba
SHA512 9a11f00536b593db03fa27e6e0d80b588f4a8dc7268868dfa6cb028639fc3ae81709d426cfef679743a9c1744fc5a360ff8e6ad6fb2de222b05aaaaa359e0f21
SSDEEP 96:i0/z2znfNoyCyaL9D20yaL9D24mubAMXAXIDx8yXhkACgqXIO94XhlN:z/zvAXPyXhpqXx4XhL
TLSH
T1D0E1DF59E8C83D0B81B24167D6E76580EE32C3874E55485CF9AEC78B5F731486217F32
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/Project1.vcxproj.filters

SHA256 b2482763a90c183b52efcb988f00f09c130bce48c0d08390a14f434673685896
MD5 11f2df974c098ef349ccbb0297c4a65f
SHA1 fa9824c9c7cba95a84ddd7e13c29f44a7b0578b2
SHA512 cdbdcfc0a6a0deee666acfdb3093e4e033227af7e6d6633978827bdaf4fb1f54882f2b4b8144cc476881d3fe79f9addc2567ff317b481215d260d715a9474799
TLSH
T159213521C8DC3B5C6132592BFB84CD11EF78B2E720D111487AA8E1472BF3208C267A68
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/Resource.rc

SHA256 21c399050548fe95812764071e85fdd304080065848e64e98df571dfa4e477d4
MD5 1b246eb62ad0a637c2d80ded070a41d2
SHA1 55e34bad6ba6d3fb8ecccf26d298ba53711f5d71
SHA512 fd0e85a2c59f498666de1a0be540a34f20ff1334eddfc534f10baada4b9ead8eea363fc116202cdafee7335d76870a15c778eed2d271f4a025dd631ae4832048
TLSH
T199412362854396338730F0F04C013E2AD264A55F4B624318B24CB5EC97F7A89039C8AE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/StdAfx.cpp

SHA256 11042ff34c0838a5bce544cd490e20cc0e22c0647eb3a571736a9e320f9784c9
MD5 8cf0228461086ffb2b7f766cde8711f9
SHA1 b1e9434de6306f55e5182a1122718743a3fbb666
SHA512 0ec379cb99f990d8224f4da833900ed8f7016d3699755834852e2263f7202562b46de9a77a1328f419e72da92597a407e8b37b632ed1050497859a1c65bf8889
TLSH
T1B4E0CD7AD89C55B050D14450B247A587630EF015D76046245509628AE12B6ABEED395F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/StdAfx.h

SHA256 b9fd80a6f94eb84a2f97cc4658ebdee38038dd6c106b0438f7e69c286b7a3a70
MD5 bede0c518e62fc0f37579845427a7135
SHA1 fdfa9301f3e1c41eea64fc0f73d8626084a5eb35
SHA512 c2e446fdd15c50d6a7cd604c063eae68b224d5ccdc2e414a0c6b378991f957eaee68ddf2f7d9759fc5e7243bb16d08128eb76f39c5e06152a81a50e299a8064d
TLSH
T123012096CCDF5451A01030E9BC492F26B00DF92B1BC842943493ADDDB89AD8C5EE7E5F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/VMProtectSDK32.lib

SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
TLSH
T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/VMProtectSDK64.lib

SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
MD5 32599fe22a118732b9261e1fcd4f94fc
SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
TLSH
T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/bin/Project1.exe

IMPHASH a9dccdf6743a7166d3342a2be5a7ac84
SHA256 5295cf2336ba6f0f91039aece6aa2a3d3a613887db30200524fedbd2d0099168
MD5 70c2135f72e3c93411699807852a6749
SHA1 460f2e2e42e1ac7adcf1837c8b18ca30cb5cedbb
SHA512 eb0b9673fc3c506ea2e25eb02896ba9346506fbeda30b0965efc8d4e733b4bed9d90b275fd4739b2671ad5973c6e40743be477ee0ade13a4737e2d3812fce6b7
SSDEEP 768:hWyWgCiQvDJ8Eh3Ovopls9wUED0XnDzm8yXBC:IyhQvFP36Kls9Ox
TLSH
T159F24B1175D38432E1A2693518B1D1B19A7F3D4327B1819F3B8812BE5FB17C19EB83AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4853

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/bin/Project1.exe.vmp

SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
TLSH
T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/bin/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/bin/VMProtectSDK64.dll

IMPHASH 1851ff453adce0cef5274e320d5bed3c
SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
MD5 db4f1a1406d292162a3b99d1fbb74822
SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
TLSH
T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Code Markers/MSVC/resource.h

SHA256 dcc70d19a9604934fbd5b65be3683145224fcbea46f7cf1ee2dcb1e2ecd17d2e
MD5 1a93146074e70d4b528c5fb9017c084a
SHA1 4b8f69493ba4c4d762cc4b79c06a8735ee2f2dd8
SHA512 6550f7c33e8507c5cec35bd95df8b1cdae4754a53c2e549ccd4971ad4896569ebb1538baa151362bd15c88133c4557aab4a2632122b55c3565a1aa235936af6b
TLSH
T113F02E394CC8D45B5464F0C100555703499CFD6BA959177F73CCA8ECAF2655203EF48E
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/Project1.cpp

SHA256 e94cc24a1849ce4811f2be0b55424e16fa76aad0e5b0a77f4750fcf2d31dfb95
MD5 2e296753ec3c9f2a3f2b051eb165530b
SHA1 2c1e8db2ec9d14790569e0dda1ff45502daa7083
SHA512 ca05a54dbafa72459f4b851c7109207a007e11b7f4a02e1493ff57651e3849e778c3c5ea11ec019a4c912ba11461c1361ef163710120a8e3eeadbe3ff2c4a741
TLSH
T16B2151446A0A7C17E7B1128C2FF2ED08E738961316B5809975CEC1A07F3A9928522F9B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/Project1.dev

SHA256 96085407bde2de31302149e040b478f654c52c961c84ab533aa32d147dc2cd31
MD5 f3b7ea6d037514bb862439c4c0aa8523
SHA1 77f198cacf7c6a1f20d04bc646a9ceb5a945a186
SHA512 074f1af3fc3d72e54d995785530946cf29dcdeac5f68d1294f885360cef7e04c347d514892b6d7f34bb68b94452b20fdacc5195799b897b19e7635b9ce4905a2
TLSH
T18621AC6A8528C1FEE1E972529734B89277E37E6C0DF62C1897C0ACC9AFC1205013E056
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/Project1.exe

IMPHASH 60cebcec59e5019b6aa223ba1a5c67c5
SHA256 2097c7152947afcf7c00314be716b2ac549b6013a8e9543e96ebfaa49644d98d
MD5 74a7af8a2bbfe03a080b0963a1250eeb
SHA1 61a8ef89d25def1f0fcae6adf24fdbf11076417d
SHA512 c7b25eeb9cdcc4b447734f80361e5377d720e4127f44011e61c9e012b2447503bb06cbf78acfa23728eb98ab132cf3e227352d1b7f994f5a15de77dfddf91085
SSDEEP 192:lFHEzcky2wf75YyB634idZcF7pb2zP1fzkM67awraZCDn:abwD51635rL5otracj
TLSH
T1839277E67EE95CC6EA64627CD9B6D6313A3CF5F00B538B13563895325B22E823DD4203
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/Project1.exe.vmp

SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
TLSH
T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/Project1_private.h

SHA256 0eae78f2e25eb971777b7afd4bea9ae80b459e0e082a8323263280c8af60a35d
MD5 488fb1bc0707ff9f3ffb4ebfd8778eaf
SHA1 a523a4dcfef740a099bd64018cc5ee6e99a4dc35
SHA512 16b347f674431183f1a7a34943f160632db553a2cb7a6ea167825f80f3654bc643ee0447b556b93dbede457462944f3aa40b9dd0b04217f0014833020843ef83
TLSH
T1DEF0245F0FCA8629133AB483508C25A46488CC332B443CDC7C9C6C5E5CE444A22FBECC
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/Project1_private.rc

SHA256 54539649c737d2c291d2b33527e1401509ac46ba1c6ee7c7e29daedda0e739ad
MD5 a4166b3fafab006a8e560a600275df64
SHA1 fa592cd2b8e6bc945914cc345f4c7467d52e1ae0
SHA512 945fcb4e344c7cb6aa97b95f4f6cf6ee20ce61e914ff674fef39cf4b2b579083daaee719fc7f430cf82681be02d673ee6938a0863d2512483c87ec9aa12a985f
TLSH
T191B01282466A74A250232B4170195410404B6304F1693C5C7824629DB7214CC114BBDD
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/Resource.rc

SHA256 37075c42fb9e85ad9302cc945c67611aebcab6572eed36ca5fdb85687ef97361
MD5 f69022cacde66a7d814bf150c2d8d0e4
SHA1 d2ff1e6096b3bbcfe69576b2e3f109b2671e0a51
SHA512 58082773a7b8ae0f9a0ee460955365e83f9531dc3ba8cd7adc4284441b0b0b819d1806d493f32fd47d56bc682daf46a92b28ac9c707d5107d277809658df99c2
TLSH
T1D441F362854356338730F0F05C013E1AD265A55F4B664318B34DB5ED97F7A89039C8AE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/VMProtectSDK32.a

SHA256 9178ee81695517887c0c9be31376ab5a56346750551624ae0f5228e0c123bb3c
MD5 b5564ee16bf952395e66517c054bb580
SHA1 609e01d7dc825268f192987b484a2a98eac7e7d4
SHA512 ae405adc10cabb9b7a09968e0fbd018930c3fb842c6586860fdc999fb0e0e311b26167b27e420a53b2bbe802c6dac778fc85265be8c14c5857ad03b25f583342
SSDEEP 192:/1+6gR0nhWkwpJUOyVjMM1Nh/0hce2+0BRMbG17j:/oR0KEQlw3
TLSH
T1DB9205B2B6931D8BE2B591BD958BDF22273CF0D15A66CB23322C64700BD1D4A3EC554B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/makeit.bat

SHA256 8202e0c42afdab926173409d347f6683dcc6e24eb0fc8cafdcbec1d267f1a59b
MD5 76377449a9a7fa8406a77ba802bcb6ef
SHA1 6ef86e3599e85c6e69aa4e74834d5bad4265d5e4
SHA512 6e018e97a20070b5e7197cc4309fbaa8c6d7aa5b71c3450c5b66ac73205e1bd7969b15db1ebe6a74e4549213bc28d0fdfd44ce09f6aa642d88c0ba22a97f808d
TLSH
T106C08C6B1628D135F1B07AC320914AA0E0A201288872243CF86E80E533E83020B2BD27
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/MinGW/resource.h

SHA256 45fa77fbec898a6f70f77315c4faa0c3196b1fedc72a2813e360cfae538cdf46
MD5 2c07158882fd8b6433e80208d5620ff8
SHA1 0bec705a56f8f7885ff485a331a72ab5605a84c2
SHA512 67b1795005ccbb7caef9ed18ce506780546d5eaf9049f3792e82d825669a5cf2bc680f61f767d20af53b20deb061080792f9587603cbc0c96aac1f868181d71a
TLSH
T1E0C092288DC038DEA968F00000BC8302008ADE275EB842A8335D2CC80F8418203FB4CF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Net/App.config

SHA256 7d9cb382e601cfdbdfac46341b7e84fbe3ae6e40e1634e8bba4ed385d0e0f428
MD5 87e4fdd106d71ec796e94c3b0ef5fe0d
SHA1 e119d2d76850064eb4c9a7c64053fefc32a030a4
SHA512 f26d60d3580bae6b55f4cf5456112373e3754bd5cf91e0ebf03cdce81bb9f46c4f50c93842fff5dd80854a1eb5f26fae6ea11cb7c9c0f7eda07f6888e832341e
TLSH
T192C04C5985ACBD2A9C334F5366408953FFB04392A064110CF05FB7570B3155D465736A
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Net/Form1.Designer.cs

SHA256 4b634173d4971913e3639d8451c3b515150fdef72c2947c829c56a171e9babd9
MD5 e5c3b724158ac1a5a17408646841b7e0
SHA1 d80da058975bee42a1133fee1a63a66f3f0fc0e9
SHA512 567e2d1da747ee920882588d00a287c8385984c2dbef01699c9c5bdea076f447fc37bb5ac1852f1cca9950608c97f0a193c4dd2b4f1e0a93f6a49b723de68ee7
TLSH
T169518A24325F8A1D7792E0CD8535AAC0EEADCD13E656082F7DE94CBCA267C0543691B3
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Net/Form1.cs

SHA256 fa5677d5f9bc5f11a9c3c39025228a8a25d17ccc6015f2523d9fda0a4cb359df
MD5 e997a4f63fad5eabcf374c1ce62883ae
SHA1 c6cec927defe64f0e8033257e2a7407c008fb00a
SHA512 e8728528e67530f0ae21ad281afe78e65ed21135f69a2e12f6a9ec1e5680e2311982cd9dcd1de3a10253de17005a031e0cde627b582e8dfb9e7a9c0a7bdc00cd
TLSH
T198117A0533495E5E02D150C56B30AE50BDDDCA22076706A69ED700C9F63BC82532EBC3
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Net/Form1.resx

SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
MD5 4eb5913a0e5aa842250f7419538fa230
SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
TLSH
T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Net/Program.cs

SHA256 0962b639efe2139234bf650aae55c4b1b4881a3d053fcf08a3c727e579ccf025
MD5 225028ffc190c308e455e928a95c06b9
SHA1 ccd47a307574ea871e8e63f5ec5dc8afdc9d28de
SHA512 a31e54d661c15f039d2b9a7c7adf2b7f1284640d340fb503f753e408ecea5061f5631ec569d14fbd29ad264dbf0aef822e8eb3b568fb836178a55bfc56e60e4e
TLSH
T1F9E020E6356ED29C1FD360B7053494C8D6779E2C46BA34A0D455CCB6C416245472D982
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Net/Project1.csproj

SHA256 c3b2905fb27f390d4f6f4017e5bd93c71005492c9055dc7a9e91190330e1284d
MD5 d48e788549a320f35dcca26c9bd4bb5f
SHA1 d664dc10e065d22b1c935f640bfc0ec91cae8739
SHA512 bcccfde11dbe5eccc58bbb3adcfe32f7b901df0f209d69eeca522c581442adb31ef091a05b0a7b0f7f66590cd2e907bf5b913fc32a268eeb896d62fe81a22c33
SSDEEP 48:3rWSjNJpu5r9mQfg93HuBQhr14H1xv/14H1BA6B6tH6T6XH1lGpPUtDAomANGReZ:yWnpu5U39lWxgGEsHSiNGReG0kd4L+U
TLSH
T18C812224E6D87AB95370417BA6525D81EF78A3F328510898F6CFE20F1F729192207B77
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Net/Properties/AssemblyInfo.cs

SHA256 21ec4dad5cf713d62ef3313ef36d6b29a8ba34d4a7f9e00c7b7131c093436b4c
MD5 244fb549d6ce840d2df5682cf20dd161
SHA1 deb4b91426cec951612e2931928f54cb473327b2
SHA512 084c31bed9252f4441b728dbb80d521791a952157b438dbed626387e63c5f51f5396d9ec7d1949e64832978b7067858ea4f46a96c184704b0628d7676abefdea
TLSH
T1D31104AC1642B31ECF0611D3EEA331D8067F736844E95C2569ED3C43F406A34426AE23
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Net/bin/Project1.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 70d72b35874fbf4f06d9899e9fa90fb7db292e8c41dbe5747c22a40ee9053ca7
MD5 a2fe9367cd01c04ef07c9bf42e35954c
SHA1 ae98a732f77ef44a8249b3160f57ba95c7189375
SHA512 ab0f282da62b3288e2258d48dd21b88ea977580085fcc12e8e5c975c09fa542fc5987897d7cadc829e85fd9b8a55870d9a7296e83b167fd95944869f4d0f6b27
SSDEEP 96:LbvvBrt7hdwFGl5PSuzvCtjDarh6TCMBhlXWNeMzNt:Lbrh2GCMvojAh6TCMBh9WI2
TLSH
T191F1D718B3E48273ECB70B729DE37E800B79F6116CA3C79E5886258F6D637014512753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Ivan\Projects\vmpsoft\vmprotect\examples\code markers\Net\obj\Release\Project1.pdb

VMProtect 3.9.6/VMProtect/Code Markers/Net/bin/VMProtect.SDK.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b560d162c060b9ce441a8ab9a4ae9d4e0a8121145bf443789c2d978e5f645f75
MD5 fb3f3c72e482cd1014dc0b6daf857421
SHA1 1dc14bc418aa4985dc2cf1621d7cb7c6409da0c5
SHA512 72f55b33826c75aca5dfb0b991722e83dd910cf36d6199159bcd5bcee078dfc407ee16f0855fd3274b6829a39b37ca722c45dcc28f3994b44543b602e5bf2d87
SSDEEP 96:XbeBWY8lNW5lleAWbgjaJvbdI8cH4YJDcbNVOz8RpFxrPOPXCr3c7isLtKMHAUYu:ZY8zWUAOgjSjR+JdzwFxrhfMHDn
TLSH
T1A822A712B3E8A15AF5FB6731AD72113107B7BA594A76CE3F148D010F0B37A546BA0B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb

VMProtect 3.9.6/VMProtect/Code Markers/VB6/Form1.frm

SHA256 b2f7ff7c5401d42629534f0bbf6af590012ffe1fc01f1ef17fb5cbe104985a50
MD5 5bbe74c4f2621b85f74ed8d4e1620c6e
SHA1 8517c3c792c7d1536c07c3f207a0f90e534cc398
SHA512 946028f8f886c4fd941d62bf276ef0820da0acf19c8d51d770b154d87a427d1a117cda383b5ead3a19c6478311c9cc979402f89e19435083409df254245f9851
TLSH
T12B31674059CBE2306877C2948C27AE08F9E1266315571C22764E91CD0FF767E93FE766
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/VB6/Project1.exe

IMPHASH 1c15af9dd6df387719122b359dc175be
SHA256 3022f931ab6972d42171da9994d4d01e6031e72ad632a59e66d058999a5cb546
MD5 a76b5af5f70dccb3d21fa40d3084858d
SHA1 ad42a6581d6f348c7c5f9ff6867eaf95107bee57
SHA512 1ff0f58b9d65aaf0068a854a679423c1896112c4005d22776007f61c5aac841d2c0f3bc1b4754927f52ad95d8f320c5a845b779e9190c7de498489e76778a700
SSDEEP 96:P4zZGj57YNbJh/PA+1AzUxjT7DTNsRJ+nsYjkjLK9wjPTtYDSLtdgGDD2+xuUI2:rSNbH/PA+3/Nfsoy+9wDTi6tdFD2AI
TLSH
T13D926453F5582A32FA8587714D33CBAE2A637C302D61CD2B39453B1E1D74A425EE361B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/VB6/Project1.exe.vmp

SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
TLSH
T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/VB6/Project1.vbp

SHA256 68b7f23e3ecfa8c7f6a39f053cb1868833eecbd66f692bb790efb022f9184d77
MD5 ef23132ea5dadf59a3fcbae7118d184e
SHA1 abe00cc4ea746af66484841be6f846c53a931168
SHA512 9502f9b08c573e0e9a6bebe9a6db1cab65201cc7b73c9969f0e9c9b5f1e1a478eab9e4df5a23fbc1917daa59313128661c70798f0400daffc3021ea511b830db
TLSH
T17301FE81725024BAF9B4303215FA79517ED7B37815D0102D82EC9CA19E8AC36B3633BB
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/VB6/Project1.vbw

SHA256 e2003503729dd9ff3f7f0e8eea45b04b08983d1e42d89e62652618471a1bd6bc
MD5 27bcc20c3a2ee74876e11bab18780028
SHA1 b3df593b378cfcd28da8da748552427aa452cf5f
SHA512 27779b11d795aacb609717b592df526018db29271f25e8b4c056f03ff3dcc795095befd07eeca8afa0d0ea2c3b9c3fbfc9bd8ef59281ca2ef0af18055dc5d815
TLSH
T13F900241050300E84747A7D49913D84B442D758A214910A096744E2834885991853101
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/VB6/VMProtectSDK.bas

SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
MD5 30d0ac58f09ba02d81dde6ea9067b582
SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
TLSH
T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/VB6/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1.xcodeproj/project.pbxproj

SHA256 54062521d3a59780771fe9f9ce29902d82aa708bd8d297d0a8067854540941aa
MD5 a327fba0cb5a78561ca36935eae1fc3d
SHA1 8ab2b72a8536346e93cc9da803b41dc8ddf5febd
SHA512 85902f9b28f0e5e7785f7f67fba0891756df3f8a90ccb0d7906a2408b90bfe8c085ed645fa1ff4b577066f9504e4432a5ee9b23edcae98435d1ab887f76c63ac
SSDEEP 192:saIK6DDbL2etTJamZNJ0ZkHm0Rvo4uaMdHpJyqJgBq+nsOVQ8nsOCQCk6w6/e6Dp:l3ZTHdJz2IOVSOCe6w6m616s
TLSH
T1CB92323B336D261D5DF921A2627E03D1F01DC238619860FED4EBD2862CBB85483797DA
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1.xcodeproj/project.xcworkspace/contents.xcworkspacedata

SHA256 f07812c22099316c6d6c262256ea0f3a4d233ef115218cdcbc02875b6e87f8cc
MD5 0804ff83cc3028484d7ebeee4a421b6b
SHA1 a2992dad2a4710dd6ac35b42446aa1f11fc984b7
SHA512 ea99528a31d65bde47a26700843d5fe35b40ee7c715a62f873b41bec21539a4bf11c5c9353a7f2b4394c4c45ae75ec990380027dbd14e1a12c47e5fe3ea98d11
TLSH
T156C08CFA8280AA253DF18E220B15C814F3BD304E2464041875E7CB9B2F61708C3D35D0
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/AppDelegate.h

SHA256 992715ee2241cf0a7ee04e41ce9f3e3ac3ccfc80bcedea1f580c516dcbc96d38
MD5 a78fc47ac285d19c6e73445426fd5a0f
SHA1 2b3bff24cca28f778cebbb6f1168c7aedcd2732b
SHA512 2099e6acd200224a6b17305f9836ce78707bbd0af015c243304277c1cba66f2fa18165375703e83cb95baf4e637c17f72bfce5361186eeafc50691d14ae55943
TLSH
T1E1E0619C9A81F47757E1002715415F53D41A340799A315873782D75A7496866C2CD37B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/AppDelegate.m

SHA256 1747002f5cb077b18bb7bd42eb60b605981ae9bb019b5daa5596f974c429f0b5
MD5 b2892b077cc170783aca500cbb9a640b
SHA1 f1ce491286118df298f167cf1d8c49de17cebe78
SHA512 8547f9336fcf4e894a015270c6983ba8679dfbe39722fee7995f788573dd9e32a7632c4ff0ecfd5f759d2602a0c4deb6c9cc583b6440c1b2337bd659c44323d4
TLSH
T16421EBCA41415C1F03FA526F17188A84D425101F9FAFC9813ADF4248AF22A25C78579B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Base.lproj/MainMenu.xib

SHA256 cf34910a34492d9688bb74f02e812a2c4791ec0fae164f55b53f63f7b437d629
MD5 183e29929891471bb6d48d1da28dce2d
SHA1 3ee34a260253a948fac1e9a508a35fae9f83910d
SHA512 30ed92235d3b43357d4feb417a894fd51bed59983c01957fae43b8f0f70b9cee6651041dd3a9a135f1e707b0eaf44dbc2ee970826d3b461c4673269ce9d5bc4b
SSDEEP 384:uO08mIW+g6gCvbjqGQ57yqWADbc1s8dKanj:uR8mIW+g6gCvbjBQ57yqWAnc1sXu
TLSH
T1CB337B04B6EC66B4A237021A6AD5F668EF21D0C71747010CB65C973B1FB7E9712F3A4A
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Images.xcassets/AppIcon.appiconset/Contents.json

SHA256 b35fbadc602a2bf35ba866a50151858ec25fdaa72a386ee5614aceb208238aa8
MD5 e5c84c2ccf8fdd213499d73dc3dba561
SHA1 fbe8eda6ffde121f9f3daf1b98de223ddf70019d
SHA512 d9f6595bacf18bdd09335db92bd1fc155bda36bc7056323afddae7280c52a2a19e3ff4ef0b9efc3f2649b91baa26fbe5ff50d24aa0c1138b0c260beca1697c77
TLSH
T19211F02BC6653E0A1236D3226ACC5101F5AB8F1F429219573A7D97CD4F3E6961490F3D
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1-Info.plist

SHA256 1d3f2475f44e34f5bb47f54f19acb076753e2ca22e13f4286358fcb7d692f4bb
MD5 013cd93f4cb925e34ceb72689a5fd7d9
SHA1 5cc5c45d038ae4d6067ce3d1e9b220cf20e23b39
SHA512 9c9baf2d6ddeef15e096d836717d0e13d5721108341f87f9b17f67b90ebd5fd5931482ef1ab2c86b4edf37f06a7c3507c3f29ec098afcc1f84839e0bf97791e1
TLSH
T19C2138B50260755D1E8213FB92F3C15E059871CC9E7601FAFCCEA63B200EA277370A16
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1-Prefix.pch

SHA256 a800b4a953acaf2351bd72d07a74bc80750d70897244bf9810379a8edc9be828
MD5 2550518fdb548da55116f674672c85b5
SHA1 a36f7e2a35b9232e7d7d7c45d2aa9558446c1a1a
SHA512 0451adf4fdf870824acfe30d41db895cba9cc4d53cc61d3634055425ea56fa76a16db2c04833be31140a4503b33a5c27af6512edf291bd569852acaf8cdb3bdf
TLSH
T1E7C022A898A83136D10100104E1056A3F36E7092CB423118B010C0AA62B8E9E04F2A8F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Info.plist

SHA256 6c49d90d1e34916d492c60bd5aebae6c2e46257e0515d45ae94fea01135e975f
MD5 9028e4afb01633c93005e6734b32b2a0
SHA1 f57b87f50dad9ebfedacf7747bed10d40c5fc0d1
SHA512 c44dbc770ddc3208e3e4d5dd569a201bbe9888b77ea6275fa838629193c3d92a88c83f588f214774b3d184434ef65d371f6c377b6e799f062ae212d626c4b506
TLSH
T11731E8B5022075092D8112E692F3D16E119971CC5E3701FEFCCAA57F291EE277271A27
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/Project1

SHA256 0a43b7994826517144e8966a9891b3cc79d6f7cfc49fd1bd6455457b5dd28f7a
MD5 03cd91ac4295936399e7cdd94cd90ebf
SHA1 60a032b1d53a161f5cbf751fd4dffd2f4d226c35
SHA512 774eb2236f7d77af52681b970f84827793d482a33a181549d17e618a5d5c9a443cbbd22cc9b8ec64a494936ea250c5f2ad02a3e2e2add4cb113a6af81118919c
SSDEEP 768:wvOMf6zurtmdbJ7i7vUtvOZAKEIIeI/I8IRR6THELmZ:wvOc6z0mdIcOZDFEzZ
TLSH
T14243E88BBB508447C58B0039C42ECB18E129F76DCF51B2D76AE9DA9D4FA0A435F4271B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/PkgInfo

SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
MD5 23b7d7d024abb0f558420e098800bf27
SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
MD5 SHA1 SHA512

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/Base.lproj/MainMenu.nib

SHA256 50a5ffbaa783b6e97fd5d1eb13241cd3236c93a32822799f9b19e5dbf66660e6
MD5 a14f8c59e65bc483c91c3eee3ddfad60
SHA1 9d363f6601628331f840751733eddc8f2688f81b
SHA512 e57a812b041b9a263de281f7b2069a9fbcec760c0bab00e52a2f01f3236128df716ddea3be607fba9149570766540001dde67181e01438b72af7ca28d558b15a
SSDEEP 768:3jcUnZRCgiTMl/vSZxHX5YGNOysGiaY++V8tWPTmdi2:xnZRCgiwt23F1t3d
TLSH
T124E23A41F9B237DCC3E70C63B1B3AE60CD5A2851EF8267661E38A3D06F5654CE546A0B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/Credits.rtf

SHA256 f2567d456578b1e500092eea27fa3da7c7df9bfcb915fd7575e3b7cbd6ce3a7d
MD5 6e2bc43c0e87081ccf9fc2edfe8589b7
SHA1 31250e2ae7011adf5d1268de756681c867cba03c
SHA512 27e7356c3e92cb6271bffd43616fb1152ad7dfb40037058ba2499b9216033e5adee2525c86e2e0ddbe7c3e389e0f67de1ff0b3db5752d714a3466fc128ba7ba2
TLSH
T169F0D4F35A0120A1A347330773724177FE908B10D7535C45B43174C33C24822B70EC09
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/InfoPlist.strings

SHA256 e27cacbf4f9358e9ad2056696e8c4cc4ebffd80d3030eb2c2fa94e6d57dca0f2
MD5 9c0f6778c773aa003952bd20169da983
SHA1 3926f2aefccded9ae9704abc34186df88d46c792
SHA512 6a5c273621720e2a94bffa822a6d934662f58e9f5dfc8ea0ea5508a730488a1cd8a995c03401931b0165d09be1b9c8b89ab001df4a33ba48ac811f7ae072afee
TLSH
T1CAB0120262F83800F0F20F2428B950705EB83C001C7423CD2350501904E0D00C270773
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/en.lproj/Credits.rtf

SHA256 f2567d456578b1e500092eea27fa3da7c7df9bfcb915fd7575e3b7cbd6ce3a7d
MD5 6e2bc43c0e87081ccf9fc2edfe8589b7
SHA1 31250e2ae7011adf5d1268de756681c867cba03c
SHA512 27e7356c3e92cb6271bffd43616fb1152ad7dfb40037058ba2499b9216033e5adee2525c86e2e0ddbe7c3e389e0f67de1ff0b3db5752d714a3466fc128ba7ba2
TLSH
T169F0D4F35A0120A1A347330773724177FE908B10D7535C45B43174C33C24822B70EC09
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/en.lproj/InfoPlist.strings

SHA256 2a7f77dd390052d5407e2b494b173a9fc6b671ab757d25b79ed23352361dce5c
MD5 3e5337e7aae41797043107c0a05980c7
SHA1 c3b87f4a1d0b7a81c08b54aa19dfcd34db210ae2
SHA512 23ca07123e45876869ea50dd5b22104d2934a6ad4dfeb3064c2e604536dd0df2c29076b70c1f475f015981654eb81d70c10a96cf678a4cc6913fd48eff8f20d5
MD5 SHA1 SHA512

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1/main.m

SHA256 07a6d43e2e91d27274fc7140363848599c71aedd5333fe478555664da8ba5b23
MD5 7b5e4871d402cbb63e3e25a522ea17a6
SHA1 aebcc847072e54c7cdeee1308a8b34f3e4b5b508
SHA512 d387e993a98adcdf97029166a595317d7e415346c410e7401105e367ed3f3eb7a1211c626cc45b69c575e6c19c499f523a07faa7aaec2c6f77a30036d09483a2
TLSH
T165D02BA851E1A47B5BA2627B6545CF02E4913003A5B674413702C107467381419D4007
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1Tests/Project1Tests-Info.plist

SHA256 c1d48a45e17d64057746317060e6d86d00358eaeb4b7b245e4a81a6ee380b55a
MD5 75242e0f8e8a36e2167f97ba9d049c12
SHA1 4a89c1fec775491f53070d578792eb388cd7ed96
SHA512 d24195024cd2940ceed99f13092ac393766e835ba87a6765c6340cf08ce3f3ede9819eee77dce5eef71f9aecc7fb05ff0b2eaf0ab8e0463ea3c0e03b5064685c
TLSH
T1D601F7700260795C1E8317FA92B3D15D0298A2CD9E7612FDFCC9A76B210EA277771A16
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1Tests/Project1Tests.m

SHA256 7ffa37c3ea82e0f5dddf1fc63308b6b437d07306aba2f6049f6f89c91d26d090
MD5 75eb54ff2a818642e521e4eb48a29317
SHA1 1394cb9b2303f27d783995950471649b3f0e8438
SHA512 7dabbaa7a77847f4e4be53fb9a7458cf4a9cce200300795244bf3fe356ef360741f4dbce6812c68e2ac3d22eb0b54a6c188c324f4fd66549d56ae828639639ad
TLSH
T1E2014E5B1987E3333BBB449B12095756FA239612C91349A07DD7E60A1633CB4237989B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Code Markers/Xcode/Project1Tests/en.lproj/InfoPlist.strings

SHA256 2a7f77dd390052d5407e2b494b173a9fc6b671ab757d25b79ed23352361dce5c
MD5 3e5337e7aae41797043107c0a05980c7
SHA1 c3b87f4a1d0b7a81c08b54aa19dfcd34db210ae2
SHA512 23ca07123e45876869ea50dd5b22104d2934a6ad4dfeb3064c2e604536dd0df2c29076b70c1f475f015981654eb81d70c10a96cf678a4cc6913fd48eff8f20d5
MD5 SHA1 SHA512

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Delphi/KeyGenExample.dpr

SHA256 9e9ffcc9f736aa26ca1c357112d8a380f80f934c99f0ecd8f44ca1c96afc7d55
MD5 0d62b1a3a2af5b5ea23618a6e29f9ddb
SHA1 f08b87bd28885f21ab98df7b1a2b08062ee17cb6
SHA512 0ec5c5d48f8f43a14ff2fc93f3bc41061a9613c7b6f922ecee1d8444924b5aa293454fc6da68e61f6042f5ab6cdaf8bfc61f2771b512a107111dcf6bfb590be3
TLSH
T1D76164EE8916621F89F53CB1D3029DA2B919700BC1F2CEDA30D53AC64F76D14A7906DD
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Lib/KeyGen32.dll

IMPHASH 9e46d55512301a0e25ff020e01794a52
SHA256 f2f7756ee63221a0d65746a74e4ddc4d8044d01212d8142a26d79ca0acec49be
MD5 ed5611586543d36119984e5b4d962ec7
SHA1 3df7f5a5025792e19dc0862779ff9a5b9c73d279
SHA512 28c976a6e94aff7340ac9f111c386ef5b2050ebf161102a82a6b00d7499e99dd4cbcd15788ed16b5b928a0d54921d23b480928cc7f4164f9c08b351709ea8ce0
SSDEEP 768:ajqJuBbVqkcULZLoaZtS0wE63y8lF98hkYLCbNFTos8n0ED++clUb0ULJGI:LJuBRDCaJayYF9M+Oi+zLJr
TLSH
T14D537C10B690C033E1A62930A9B5A7669E7F3C015BF550CB7F980BBD5FB02D16A38367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Lib/KeyGen32.lib

SHA256 3964724f3a06b1a1507ddf33595b3fb13ff22f3c484be438af7534f6175c5568
MD5 a4d8c1e647c940ce20371391513becc0
SHA1 c36da7f3bffe0c054c5b6def2dd9533c1d75f9ab
SHA512 4d1b32d629348295ff4a07df31bff67e50a49fa01873845549c32ab81634020584ccc00690b58a882b9a8a2f5a8b67f06bf2883d52d40802a12a772e7b1804ca
TLSH
T1BB5159916547BCABC857D9B08542ECA5721C2403D7E5EAFF351C84A383EB74AB79408A
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Lib/KeyGen64.dll

IMPHASH 44d72ff3208e2f77edc20a3432274582
SHA256 36cfd91644f4bf6c28fb1d930c7ace03803b35002da5e7d4a6b756b20c97df0f
MD5 96a346078d81b1fbbc605752030c8863
SHA1 97f75c29cf832f7902778bb5b4d3b49354e2acc3
SHA512 a52cc105bed46dbc13b46f57dc060376158b8f3711961efc0e3ee07b3aad7489f23bc274e52e9f26a594f5d3f1722d094b959c24b76f459a8acec3902bf1a428
SSDEEP 1536:wCkiPbixLCodLXP3ZJwtvgKwTADEM3bht8xgOqlwkOZ/n/:8P/wRQTAIMNt0gOqSkOJ/
TLSH
T13D73180973A800B9E0678279C8E79A46E7B2F842677293DF5364035E2F637D15E39372
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

22376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Lib/KeyGen64.lib

SHA256 666a61c98bfa6bd4812130c01f4b9f2fdd71a07818713c5bd1a967dee92bf62b
MD5 68ef9d4aa6d3634595612e02c3ff2977
SHA1 cb7f713baef1f741ea6bdba73a9edd221c701f06
SHA512 d425590c0a956e67904bbf07cd72ce9d3a7da7e814f71661a6ff1e8e661703345c6625df1c8988b566936f2bd0010dcf84f07e04db9a08b815310e6218741f20
TLSH
T17E51DDD07A5378EFC555AAB44007ECA6321D201353A5DEEF350C45A643EBB4EF79843A
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Lib/KeyGenAPI.h

SHA256 115c0be93e66b1620e0dd338370c9de973b20726886b93146aabb7ed61ddab12
MD5 213de2b41da47865e3db75d104af491c
SHA1 5cbd6275fecb316d771d911cb9fd88c166a1a828
SHA512 3cf8ce6fad464630ce565c2f531ad2cafec41415b7868d78231f91cc555cae981fbd4e5cfd8e1b12dfe618e1a4634a112a212b08b8b4812c591c22fccc8550f8
TLSH
T1294103D95911A39FC16435B0E17AFC613405300A24FBDECE331D4A11A3434942BD49FE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/MSVC/KeyGenAPI.h

SHA256 81d680d18ad315eb7c8e3f8ea7e51cfaed9cd5cc711f43dc8b1c22d366d28ab2
MD5 6ecf155a3005f002d62075f9a901d659
SHA1 2b1f6d1d5f5a72279eef2d2d18922b7864abab5f
SHA512 da4592e930ccfa17ba56781ca2b4fd4b8e9589d023c124d5f59759c961c1a28082f56fc6b833c0e693da588202902d560aae7a838e9f6dbe6a3ba80d37b26d51
TLSH
T17B4103D95911A39FC16435B0E17AFC613405300A25FBDECE331D4A11A3434942BD49FE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/MSVC/KeyGenExample.cpp

SHA256 43320c23a3861dbbb9c2f1407b35d16c0ff134974a3d76c72ea548c8291bc699
MD5 401734a2ff3bc79a21ab66f14c02d0b4
SHA1 cbb2669ce62d4df78ae22ffe135159e5413b13ac
SHA512 46ee7fe1bed81c4575f2320ddb4255f58622e5c0abd8fc4adf8dc81241d90109d105e5bc3248d2fad792ea57c1795ac2545ad702fff643cd8b8776af37c33ae7
TLSH
T1FA21E1611C62502B279638605E718F53798020254BBBDADEB14C7DA2C3A78B963F51CF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/MSVC/KeyGenExample.sln

SHA256 8ffde88861db97dfc5062a192e3f6b09dd025316ef2f4993679b76dd10af379e
MD5 7873575bfb3b22c62f65c28a1e67e06a
SHA1 87a701827c9830ff3e0757ec77fb02890d0c3320
SHA512 650d7b3a8283e4f30f955c9afd98b9cebf10895363c5c93f7f75f2d766f6854da7c7012926d7e6e73dc81dffdf1b48dba4de74226c2dc8b9373053f7addab642
TLSH
T1D8217D68612D6DD654429A9BF0F84DF5AA370764829D38FC0CC1E479EB37386912B8C2
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/MSVC/KeyGenExample.vcproj

SHA256 a5d418df9f9ad24b75a8c9c13913d3db4d642abb5e03fd65481b40f66fd32b33
MD5 778306cb8f621459e8a578263b1d96a9
SHA1 1eb8135a14f7cd6251bcab8b4806eda297bcd9c7
SHA512 cefbc28ffe204b375e98e6f299731d98832249647b72ba00c7b73a14c8b829d64d464f7a04dff4390edb3ca8620327e857aabfdfd9a7557cdaeb02d7869e2073
SSDEEP 96:oiz071c0zoZzCcwoLzNC7+cnCovzCcwoott6ipfwpkbI4:D0W08vLEfnZvbiFwW
TLSH
T1D2E14E58732C3CD552C182A31EF604C83B1EDEAE050E12EBD67D7572E5DECAA6322761
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/MSVC/stdafx.cpp

SHA256 d23184016d3d66ed9aa233ecb322ba00fbbcecb217c07a3c38f0c050ef8a7c99
MD5 45052642e89c1c714db544eaaad2bced
SHA1 710914b2fd35ef517a62f7227ff873c15fea2394
SHA512 b4167fec372832a4d41cf82390dbfe4c0585b2258cc602fe59530fd18778c994401aca09515ea87bbc249b72481c35693a16d8e27cea3018d90e51d94784215f
TLSH
T177E07DBBD88C54B100900450F24BE487A30EF014D36085200009A389E01B99BFAC398F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/MSVC/stdafx.h

SHA256 c3927a6b3c740fe5615596e2661fcca13b2e744d2381b71b594672b18e97cafe
MD5 c9f9aca10d1eb1ab2fb27bf20a9958b7
SHA1 42c26bf7c945fdbe981a273ffbea2c8f94d8433e
SHA512 09571b985dc05ae41b6345317eb71ac27aa25944964f80232e000e32e19aca6be7fffbad9299ac225ca1862be527b79d0fcc0b2516c39d829844865d55d88c6e
TLSH
T1AAD05E30C51D9086F20311A63607D932E30CB8C94795B12D605270FEA540EC663CB7EC
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/MSVC/targetver.h

SHA256 bad5ca557eb99c1e3a43d3098fe0fef8def7228b724dcff3a72143f3717a8eb8
MD5 ca1c19b9c013793a766ed9900d6968e0
SHA1 27ef56be395a20dbe482bc8df3185f28591ca08e
SHA512 4200c14e53676970a3472002b8b00ce94627dc368841b86fe2fa65c5541ca1f322a3fb6dd5d41556469b0fefc8763c35c7c7b4b5f1896d194c97dfc396752e73
TLSH
T12C0120522BD683F71BA1050317CEB39A972084FE1B6B525C70ED636463A7000432E2FA
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/KeyGen.cpp

SHA256 ac969f212d3e60e23d5b6d89b78ed24616a1acf294c81af2a8830a112e1b6da0
MD5 5b8c87edf47f86b77f56edfa52f120f5
SHA1 2b41ee66e2970fe41ad82fb41fb6c1e6103568bc
SHA512 b8c50532c235cff0c62726587a085504b5924731a518ec71ca7f3b22466f4f5fcde9ae44320e0069aae3c78558b024de2f278a0314362674df8c30f5582774e1
SSDEEP 192:QllCP6rrb+ngn7TdkMGJv+037DRrlwMWPiXx09mLRSSk1:Y+6rf+ngnvdkMGJv+m7l/Xx04LRST1
TLSH
T16EF135C96863EA2B171625A080B3C782BB4440BA66E39AD7B6CC35653C935387F741DB
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/KeyGen.def

SHA256 8a32ebf94592fd5926bdf1d91652913a604f3546434f028f815492dcb2cfd51f
MD5 023be6ecefdcd3a6e8944fa3e36f4abc
SHA1 ce47f74e27ec5f13f3b18c42a60b31d568cefb8a
SHA512 ff8b1ee502c58311ef9bdddbf52c666dbfe3021007b861497b8d09d47324ca2cc4a88758980b09d89a7b55652125dcc0862cadbb62b2ad1f75405039722669a0
TLSH
T1A8A0021C006BA0FE42C77CB08836DC7270A5006BC1ECA5BB611CC76ED3A3C4923D889B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/KeyGen.rc

SHA256 40436872123ee43d3919ee939b2818211b0ead4665027c76ed23cb5e2a1e8aa9
MD5 7ee57e0159e66f6bb6441db8dc42eff5
SHA1 80842ec0fbff7d873f4ae282920d7fe69b4461f7
SHA512 87a9640f791221fefba6beb72924d6176c4c90154517285543e921a7a9f6feb885b0dff96b2e8550e2ed06235d7eab57bfb306eb429b749ab7df7ccb9c380311
TLSH
T13251CE530C4151331A30B3F16C016D57E26C525B92B2555DB18EF498AFBBA0F13CCCAE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/KeyGen.sln

SHA256 90a54af9f1f0296c95fac2aa9abaefea2c209d04bc70c73ea7a09f13e8fda704
MD5 c76864c43b426bcbecdde6b06cacee72
SHA1 8321a2e951c23358a62d09bee65bd2869929af53
SHA512 888b085341f4c4f1453c0977d61177f61303e9636a6631adf9dcb709f7b0f080f0524c5c7a730c364fb6ee2f641ae3ecb427bfada425c0e39f22c3dd77354c56
TLSH
T1DF210774221F7896988169AFD5FC8C69AB77428CC24C043C55F6808DBF7F642511AE83
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/KeyGen.vcproj

SHA256 e71a2f7536a42aeda0b236599a2be99fbdf7cc031bf1f6e057c7333a20d3286d
MD5 d0700314684315b6b96204a7c918b907
SHA1 16c481d97ed6770450e2fa2461da317c6892c0e9
SHA512 af067165fd39663f921694e005be321d3c13f07cf19ddaf9c9b2c6569bfde7ba056c047c0238fd69253177d25db2bcbda390935b7510b7dcb1bfe1bdf2a4a0ae
SSDEEP 96:tJzelycW6oFz9lUckoKzNY5hcYtonzNY5hcZkoottjipfnpfwpfRpkbI4:DeBW39jEWAYEWAZ+iFnFwFRS
TLSH
T1B3025B58732C3DD592D086A36DF604C83B2EDE6E010E02FBD57E7576E59E8A92322770
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/KeyGenAPI.h

SHA256 a3ed3cf0a617e2350f2833b98c6a0dec048925655b9be79720ab8646ae3bdd3d
MD5 cd4b1a9065c3b84b68fbb48c1ded3afe
SHA1 49eaa6e04f69314af2d32a5a13bac475c090be07
SHA512 55ece562d6e76a9e90dde9648bed8c3f086cedde95c04fb5c0bfb114e9c872cddec4f27b30652cac5bfec7004ee18304d0e6a098cab310fa4e93bf9bf7e9ac5a
TLSH
T12D4103D95912E39FC16435B0E57AFD623505300A29FBDECE331D4A11A3434942BD49FE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/b64.cpp

SHA256 7045296851881d05833f91d589f1aa275748682258b2f880c7b058df7a95917b
MD5 565cc6e2453bf8502cba5891749eb22b
SHA1 40a9769ff85f2985ae22fc751d1d817f85198c2d
SHA512 c52414302cc811e76101c8e3e30ae8a731c9c1dca9cb0507dbdaf552e778bafbaacf53f790ba19b4e5e9571bc248971d2fce3c82998547abf6fe4f69ddc5ef10
SSDEEP 96:+KFclDD6hbFuWf4p/hbFW3+4ztfB/zyLbRf:+V2Fb4p5FiZFz0bh
TLSH
T1E3919695139242B864B7431AEB67C94FE73F212735451688BA9FB9641FB28D033B1CEC
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/b64.h

SHA256 19142650a0f74478c64916044b671cca75ae42edbbcfcd184269ac7d0e56632a
MD5 3787661ee321bf83e5e24e3dd95b1431
SHA1 cd64091afe2854e8dea097dce8f44ae6c540e3a9
SHA512 71c1ef0a6a8c69296194ad093b723d51f6264e2063f71b303fc79de43a45b3b11f0eec6a73db1644cb3ad3c2293eb2af1dbcdf933386b9fd4bd0e818d5b7fc0f
TLSH
T150D05B47049554C16DE11B8586034488C139A3AD32E49BD42F9E73A4EC533E23693C5D
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/resource.h

SHA256 e2a5d407d74299c364e96dbcf356e4106423f38e76ea0f5c7dd52d59570c1bc0
MD5 16405e0ca2e276e1ac7806c4eb8bf241
SHA1 aed8dfb0dcd78edccee85c12441906d534a78b13
SHA512 e1654886b5b957e0afbf2e574d00bf9b6135a1cb774fb0740677ef36b05974b854c42b22bdd203ed9c68da1040e3796c5d2fd6041e04203c5333a8b6d2ca5368
TLSH
T120E0223A8D88C52B5450F0C2000124178A5CBD9BA6890B7F32CCF4ECAF2A86502DA04E
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/sha-1.cpp

SHA256 d0b3de85b088c9693efde6cfada151b3ab06b9322180e84a906580d08b253515
MD5 b0540fb1dfb272b933195c3ba54d53b5
SHA1 945e09af3916fcde3b843e331817b88624202586
SHA512 1d6120305493e48714c83f99d01633761e5e50a3bb933754e6f2dfb19d26a36fb0a6ea0d7904c461cdf587d03b2b7833c2ec011b739c0155b56bce0b6a38946f
SSDEEP 192:SVbqAyMsEoTq4tTDAuRjS9+iyOW87DVusFcech6QOiyiYuZeDUuMuSv71XqGgV:ayVPT1jYcech6QOijv71XqGgV
TLSH
T1DA22FE2919A04E28217741B67B0670D7E710E2279727A53FB06DA28D9FFC8D183E1FD8
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/sha-1.h

SHA256 fcce8c129b1d7e234b57dbaaf100e2cb3a9c2d32ab142768e39a5bc2bad3de05
MD5 1dedcb4fa98498c32505ee163086c3af
SHA1 eb0e54aef302ff141ef1efeb57f686450d33821f
SHA512 45309a0e595d935ec1c38b30703b9f2e036d05adc0ede748504d38f58576aaf7039c8fa573b1497ca0765147f1a11f4462b2adf0d36ac5f4d0aad88c5d3a3ca6
TLSH
T1C731444724E4BE6A507B01B32B21B0C5E71462070395B7B6F0BDB26C1F9EED46392EE4
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/sshbn.cpp

SHA256 6dfae3e9c96dc4c3c47ca1b8db03647cea8810633ae067d03e0f5c923ba40d02
MD5 ad7d77f577585dfd6467b713d316baff
SHA1 8c337bd6dc21a49a374fb7f5d3dbe3412c23ec40
SHA512 3039320af2c0b1660b9a431cbbae2e36cb3c080655edaaa6ae4001ad1f7fe3e14defed2cc5c543dff5b843bd41ff25bf560e6b4a0511b2be689dbfbe3c9fc0d1
SSDEEP 384:ZpszsbnFF+G3BL6/Odbw2iwP73bgDI6QWUbw2nX7ImW92H7wbw2XSiUxxcDTDvDt:vEs+aLh8wP7rGO2t9Lvmomwl0QWXhWP
TLSH
T173C276594E9271313773921A5FB48024EB2DB11F34E632EEB83D01A62F3245457FAE9A
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/sshbn.h

SHA256 01b3a66510575a6f4f27947f966f2f983de80defaf944485c110a3ee7f189ccc
MD5 de98fd04a79c9ce4fb2fde790782c425
SHA1 0dd4c1e5c0c9d2fd1a0d4442da22bcd66d39f46f
SHA512 8411411c2cd09455d807550bf07bce3dbff5039c2ae9c922745cc552f03bcc368e4cc1b2c275a8db8b259ea11c88439b19c11b43bdb41fda673632ae8d9d7420
TLSH
T16231841D3D9053A11BB60351A25194BAF11BB24E3DE632D130BEF36A1F25868EAF7C84
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/stdafx.cpp

SHA256 ef4597a2058c6fc7ba90db0de77025469d56612f23f6bbeec9da21e136a50717
MD5 fb275542b044bf3ec0df55bcfbcb0eae
SHA1 b4e4399429df4e01af250be15bcf36af91c790df
SHA512 485c21fa0ab2a5b10836e93fcf259918e65803a09dfc2827c76726cc2a6ec23e927150664e137a5fa8a2c6feeb424278a2ac218e11b6e025b1df1352f39ea160
TLSH
T1A1E0CD7BDC9C54B040910450F247E587A31EF115D76445251109A289E11B59BEAD395F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/DLL/Sources/stdafx.h

SHA256 b065d2603c2cb38bf00b352d406621d9ee9f9cae3b5f9cd772e24bf34377ef32
MD5 23696287d158f08c17bd2c2d30e532ed
SHA1 39736abf75dadfaa83b15aeecb58f6c5ea21ccdf
SHA512 c0ecbdecb5edbfe2f5a232c2f1a91985006b2e2b8e78789548b8074814606f006d285f2ad2abbb0d154f5ff929807b977bd60c3bd9688408652d867cbdadff6f
TLSH
T181E0DF68CC6D80A2D62324A6611A8138208CF69317C4706B700A3DCFB8398C93FDF2FC
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/KeyGen/AlorithmRSA.cs

SHA256 744286c0e1bbaed27bb316dd36a37d015ac9d9280d8e39429caec411aa0366c5
MD5 e61242cbf26296aaf08534aeac47f737
SHA1 368d6ab6e2c8f6c0f1424920d9afa27c87c67dee
SHA512 6feba9ecb65d487ada144d6eecf379745c1b516e85565cb8d7fe1553d55efe0df9936593e66acfd56f7888940bf29212cb24da83cf23d8b35b78763c1dc54f6f
TLSH
T15211CC20B76DD33E0EC564417870ECC7BF3BF30440FA95AAB8AA8AD4C09081053B4ED1
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/KeyGen/BigInteger.cs

SHA256 66ac4d819622d592f834ef41168647f12f4ab89578363059954f4f5522c0dacd
MD5 61b08a88562697a10b8ab5df28b7dc02
SHA1 33cdf517b81617c6725260e85216a45c24f36ced
SHA512 59dec41b95bc7f51b15aa549e2171edbb4173016324009c788431b33dbad6daddd93bc70451fcca32f24736ee6f9adb72ef3bda8f5f8690300ae5744ecfe59e5
SSDEEP 768:bjomlEt3rtjU+Zh6mk6/V9f4qpYcZ5MdK3juh52FbAdmdCt+:bjhEt3rtjJf4qpYORHFbZCY
TLSH
T18AC365446B470E26187745148FA928CAFB25F53350E8A258B81FB7A82F7CD1522BC7FD
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/KeyGen/Generator.cs

SHA256 296d4137093d7219832993af46282d64afdd5a129c10ad1d95bed6f2d4c0d137
MD5 7be460418643b5db26f1d674b6d0a66b
SHA1 794fd3c3a0ca3c27deaeb080b34949188212801f
SHA512 10f2d7249e283dcfb9b623cb88c6d3846aed3519a46098a466633c0da058e087304f87d756d1af5d9d6aeb284cf61c1139ad898c78de11f644c97cd2ff9b6497
SSDEEP 192:m3U2uTWoYc36oFtIOWKaxUtZRd/BzAlAlOtNRX/zqsv/xsVriTZq9LliZk/5X:m7KY46sV1BLs2UmEA
TLSH
T1ED027650751E526A26B621A292B1C144FFBED133837085A6B88D7E005FF4F0E6BB4FD9
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/KeyGen/KeyGen.csproj

SHA256 1d6ab2dbe2e54870cbffff850e118aef2514a3a72dba31137370a465ca4e618c
MD5 36d26f19f21f6ecd46146bc30adf443f
SHA1 0c3028e7f2f1cac4f323596a00b6fd7b6a2b672f
SHA512 9b423366cba99fc5e57da7d108999b37b769680a12aa2de26c327c7dc847f7c807cc4112d87350edbde6ad7f73e20067c1373a0c3a0647fed9b41ccdf27d4187
TLSH
T10E41C034C1D83EA652B14533E167AD42EF75A3E324A00C69F65DE60B0BB3B681613B73
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/KeyGen/Properties/AssemblyInfo.cs

SHA256 41ccc5d36c9f998cd42a26c4eb6d9315cb7cbc77a7ab7c05aaedd087cd26a228
MD5 a37540a3323e3b73fd8fed38dbb8f823
SHA1 d7b5746c065b24297ac500d7e8baf0ff52ab724a
SHA512 4c1562ab56949b0bcbdd006dd88e307fa88d192a2536b7bf9364cc752901546eb90aa690ac3f1318c2a3f91d8c028622552a088738a355751e4676e59716d7d4
TLSH
T1DC316D2D6341A37E8F510093AE6B75C5837D6378D2FA0C4A39BCB453E341B7842695B7
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/KeyGen/app.config

SHA256 8567f33dba5f913093548577c8eb64e6e241093a6fa69ed672f7f34cdc10cfc8
MD5 ad220032c67a8b2189fadf423f9bdfc7
SHA1 8b14638db626dc92492c662e3b05a3ac6485d549
SHA512 b071ff1a5c4766514cb7505ba522bc72c3078b1741065bbf0b9b5242b5ba5a5c48d86c48a778becd2f98b7afecd6c0f3c2b5fb6788dc7acd48210f363413010a
TLSH
T187A002C6562C9D23BC434F67D6B90E05FA310785C56A100CD46F7777420517C5706246
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/KeyGenNet.sln

SHA256 f9254ede830661ecfd3f258526c90b4fcffcd69b078ffb631dc0c0a9aca0d940
MD5 6117926d74e7b4c80540f302069ff385
SHA1 287ed041f734d432a3f686f59412777a99633e9b
SHA512 65d8654f18b5ba172b6de72e7c6a02c7494583c33ff90c7616ee70fd683f6ff83f9990b60ad4c8aceaf0c070274c72857a120a1c4d1fe57d947835b6df73fd66
TLSH
T1EC315AA922089EF6F6C223D6E2B22CD775378094C15B4C3C104E906C5E1FE54767A28F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/Usage/Program.cs

SHA256 9ab5329169713cc52dc010fff97f28e0b88ac775899f5def24dce575bf0d63f8
MD5 f630c32d62379442c1a6a57555351c50
SHA1 cd1bf86fa8e1db2cbe762c03436a3c30aefb1660
SHA512 7279e435fadbd0a8c393e2931b4299abd777968f22b2672c666d956e02bf2585d08da33ff4d419cb9887e80a3be6fe472021e6c3882612e4e425303f850821cd
TLSH
T1A51110071A5947A910B373979B125800FD7AB6278B618223B94E0C066FB4D087774E24
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/Usage/Properties/AssemblyInfo.cs

SHA256 78a484e445546e511e9cde1f74be9e268f700294ffda755d22c30654293838e9
MD5 3efcb830e3a385a4d5b66360083004f8
SHA1 0b476c8bf045180debdcb40a000d3b8f0c2d74f7
SHA512 26768b23988c302d5bc044d975c03b666d56a10f1f64da60b9c2432da309f82998ed8852051353d38b0c75333bb61611755a52bb55e83e84f73a5a59f86dac7a
TLSH
T1BA217C2D5741A33E8F110093BEAB75C4C37DA32882FA0C4925BCB453E201B3843A95BB
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/Usage/Usage.csproj

SHA256 a1247dc89d13755d78e790330796160aa25cd367b2ff1f762aca8d6233f42e57
MD5 c067162286cc8d65e2c3b2671997f493
SHA1 b5ad0a0a9099e0446bf5ef954d6cba4c3739c1a2
SHA512 7e6c9b4dadda8127198da329f95d2500d9d8d50ae777931e678e44f9511eceb30911e29be355c1684b0f11c7a3c26b6427975569a5ac1fc920c4f6ac66c564f5
TLSH
T11B51C134D1D8399752704532A1627A41EF7993E325A04C58F69DE50F0B73E6912537B3
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/Net/Usage/app.config

SHA256 bc22384394191e57727bee7136fffd077ce8b44b15e3696f2d0e4d2910620048
MD5 6098c30c4ee739e5f988007e177ce308
SHA1 f1fb5c24b06f5285a19173c9c4f834ea90ec5363
SHA512 0f8f1c69d5e4dd928c460afd76e13193cdb4c87990e7eafec512024e964493683902443b9de21434d764f9ad9110f8cbc5a9a4907383f1fec46a4b4f24a9f7f5
TLSH
T182B092964628AC2FBC231F2357540A45BF3903929168400CD09F2B121A012AE831A346
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/KeyGen/PHP/keygen.php

SHA256 4981f7f7568d18016d89e6ebf0d38c5bcbe7f197d212cc4370edd197438f335e
MD5 9b7f078dead8a3600b03a3fc5874ab57
SHA1 a27de6418302bb948cbf5955e29e7f507ff0e129
SHA512 cc25970fa6e81055b9206f7da72397e06455b14d648327fb69892e82580489f20a059b53b1207fd3b5550787f07e2ff4ee6a3a3628e5629d3e20923eba53c88a
SSDEEP 96:JotD7f9qxAuNZuiRTXklWlsk/GXF+yD+4tVvSm+DeLxxlLis4+r/+SNukMGRQ4+w:vjdRbgV7VtN3qeLrws4u1yGRQ4+dnK
TLSH
T1E5F144197F9AB3A652C62460BD76C61ADBF82032332441D1785AF588E0ECE3C7B75C4D
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/BCB/TestApp.cbproj

SHA256 30000994504ed73c734f1e3bf28dbb5acfc886ac40f660ebafe5a932525a8c96
MD5 cf788128662ebc9744a77d5637c7ee53
SHA1 9f533aac2b9614c385a068c371eb473441161447
SHA512 bed6fd92e96887046e7621578b17814766f61d61f62f1edf895861c915415af4b0d635d9073b9e2bbc238f780262548def8906626a72d9033c265f83f3e262ff
SSDEEP 384:kG5RiEmvvFDvQdRUNzpFdNztyeUQzg9tGR7psuYHjIYhGZ:kSiEmvEhGZ
TLSH
T1C852215584C429A946FE4B7B4E027840DE72539B21FE8C98FBDF62579F72A1C1043AB2
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/BCB/TestApp.cpp

SHA256 b0cbf24666a698ab6389cd710ca45989bd82409f83983c3673762bd5f7ea67a3
MD5 567fa4476c8464b9cc6998eac6914b68
SHA1 980dae48f1d9f16e92de8132fe8caa138216ca85
SHA512 dcc725c5c5829782d01f90cafa770f977add5f2ad47c4375f80f81c4ca72d580e30c8da729b89387675ad51c2a942c89fbff8a649463f00f549ab8aa7bab6495
TLSH
T15311FFABFD498073D2D3E47603349180DA7FEBAD4BE520A2F1804118E4D00AAC74FBD2
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/BCB/TestApp.exe

IMPHASH 26e7fb27c5c9cdac46ddac5efe7e2eda
SHA256 9913225feda352d3662c6a2498ccbe3da39fe0a5abb899f31aa7ea8bfbb99fd4
MD5 fcc37089f845116c7d2dd21fe9f86665
SHA1 8db3fd7a998cea640d0904ebf0547a8deedca2f5
SHA512 590d9d56ee520a2c22e0c7e2a22d6d604732c5ef77de398eafe27ff0aae97ad5929906d4f95ec5702b4c89f6d26266386ddaf75f53b0adc826e3aebab3afe8d9
SSDEEP 3072:s+YK1ZJCQSMbhoRVw2EVYv6VYi1p15QVx:v+QSMQVNEVYvSYeQ
TLSH
T1A0B32820FF588067F466C179272DBE50F1AD3A326091E21E7FE56F8868B50B563D920F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

rtl190.bpl

@System@initialization$qqrv @System@Finalization$qqrv @System@UTF8ToUnicodeString$qqrpxc @System@FreeMemory$qpv @System@@CheckAutoResult$qqrl @System@UnregisterModule$qqrp17System@TLibModule @System@RegisterModule$qqrp17System@TLibModule @System@FindHInstance$qqrpv @System@@DynArrayRelease$qqrpv @System@@DynArrayAddRef$qqrpv @System@SetAnsiString$qqrp27System@%AnsiStringT$us$i0$%pbius @System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$% @System@@UStrFromPChar$qqrr20System@UnicodeStringpc @System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$% @System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus @System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius @System@@LStrInsert$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%i @System@@LStrDelete$qqrr27System@%AnsiStringT$us$i0$%ii @System@@LStrCmp$qqrv @System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2 @System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$% @System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus @System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius @System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus @System@@LStrFromWChar$qqrr27System@%AnsiStringT$us$i0$%bus @System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$% @System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString @System@@LStrFromPWCharLen$qqrr27System@%AnsiStringT$us$i0$%pbius @System@@LStrClr$qqrpv @System@@UStrClr$qqrpv @System@@HandleFinally$qqrv @System@TObject@MethodName$qqrpv @System@TObject@MethodAddress$qqrx20System@UnicodeString @System@TObject@MethodAddress$qqrrx28System@%SmallString$iuc$255% @System@TObject@Dispatch$qqrpv @System@TObject@ToString$qqrv @System@TObject@ClassInfo$qqrv @System@TObject@InheritsFrom$qqrp17System@TMetaClass @System@@FindDynaInst$qqrxp14System@TObjects @System@TObject@UnitScope$qqrv @System@TObject@UnitName$qqrv @System@TObject@GetInterfaceTable$qqrv @System@TObject@GetInterfaceEntry$qqrrx5_GUID @System@TObject@GetHashCode$qqrv @System@TObject@Equals$qqrp14System@TObject @System@TObject@InitInstance$qqrpv @System@TObject@$bdtr$qqrv @System@TObject@InstanceSize$qqrv @System@TObject@FreeInstance$qqrv @System@TObject@NewInstance$qqrv @System@TObject@ClassParent$qqrv @System@TObject@ClassNameIs$qqrx20System@UnicodeString @System@TObject@QualifiedClassName$qqrv @System@TObject@ClassName$qqrv @System@Set8087CW$qqrus @System@Reset8087CW$qqrv @System@SetRaiseList$qqrpv @System@RaiseList$qqrv @System@IsMemoryManagerSet$qqrv @System@SetMemoryManager$qqrrx23System@TMemoryManagerEx @System@DefaultSystemCodePage @System@IsMultiThread @System@IsConsole @System@ExitProc @System@CmdLine @System@IsLibrary @System@MainInstance @System@ExceptionAcquired @System@RaiseExceptObjProc @System@ExceptObjProc @System@Types@initialization$qqrv @System@Types@Finalization$qqrv @System@Uitypes@initialization$qqrv @System@Uitypes@Finalization$qqrv @System@Sysconst@initialization$qqrv @System@Sysconst@Finalization$qqrv @System@Internal@Excutils@initialization$qqrv @System@Internal@Excutils@Finalization$qqrv @System@Rtlconsts@initialization$qqrv @System@Rtlconsts@Finalization$qqrv @System@Character@initialization$qqrv @System@Character@Finalization$qqrv @Winapi@Shfolder@initialization$qqrv @Winapi@Shfolder@Finalization$qqrv @Winapi@Imagehlp@initialization$qqrv @Winapi@Imagehlp@Finalization$qqrv @System@Sysutils@initialization$qqrv @System@Sysutils@Finalization$qqrv @System@Sysutils@TOSVersion@$bcctr$qqrv @System@Sysutils@TEncoding@$bcdtr$qqrv @System@Sysutils@TLanguages@$bcdtr$qqrv @System@Sysutils@Exception@$bcdtr$qqrv @System@Sysutils@Exception@$bcctr$qqrv @System@Sysutils@Exception@$bdtr$qqrv @System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString @System@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi @System@Sysutils@ExtractFileName$qqrx20System@UnicodeString @System@Sysutils@TOSVersion@$bcdtr$qqrv @System@Sysutils@TEncoding@$bcctr$qqrv @System@Sysutils@Exception@ @System@Sysutils@TLanguages@$bcctr$qqrv @System@Math@initialization$qqrv @System@Math@Finalization$qqrv @System@Timespan@initialization$qqrv @System@Timespan@Finalization$qqrv @System@Timespan@TTimeSpan@$bcctr$qqrv @System@Timespan@TTimeSpan@$bcdtr$qqrv @System@Varutils@initialization$qqrv @System@Varutils@Finalization$qqrv @System@Variants@initialization$qqrv @System@Variants@Finalization$qqrv @System@Strutils@initialization$qqrv @System@Strutils@Finalization$qqrv @System@Ansistrings@initialization$qqrv @System@Ansistrings@Finalization$qqrv @System@Rtti@initialization$qqrv @System@Rtti@Finalization$qqrv @System@Typinfo@initialization$qqrv @System@Typinfo@Finalization$qqrv @System@Generics@Defaults@initialization$qqrv @System@Generics@Defaults@Finalization$qqrv @System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv @System@Generics@Defaults@TStringComparer@$bcdtr$qqrv @System@Generics@Defaults@TIStringComparer@$bcctr$qqrv @System@Generics@Defaults@TStringComparer@$bcctr$qqrv @System@Diagnostics@initialization$qqrv @System@Diagnostics@Finalization$qqrv @System@Syncobjs@initialization$qqrv @System@Syncobjs@Finalization$qqrv @System@Syncobjs@TInterlocked@Increment$qqrri @System@Generics@Collections@initialization$qqrv @System@Generics@Collections@Finalization$qqrv @System@Classes@initialization$qqrv @System@Classes@Finalization$qqrv @System@Classes@TObserverMapping@$bcdtr$qqrv @System@Classes@TLoginCredentialService@$bcdtr$qqrv @System@Classes@TLoginCredentialService@$bcctr$qqrv @System@Classes@TBinaryWriter@$bcdtr$qqrv @System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2 @System@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv @System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver% @System@Classes@TComponent@CanObserve$qqrxi @System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction @System@Classes@TComponent@GetObservers$qqrv @System@Classes@TComponent@$bcctr$qqrv @System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter @System@Classes@TComponent@$bdtr$qqrv @System@Classes@TThread@$bcdtr$qqrv @System@Classes@TThread@$bcctr$qqrv @System@Classes@TStrings@EndUpdate$qqrv @System@Classes@TStrings@BeginUpdate$qqrv @System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent @System@Classes@TPersistent@$bdtr$qqrv @System@Classes@TBinaryWriter@$bcctr$qqrv @System@Classes@TComponent@$bcdtr$qqrv @System@Classes@TObserverMapping@$bcctr$qqrv @System@Uiconsts@initialization$qqrv @System@Uiconsts@Finalization$qqrv @System@Actions@initialization$qqrv @System@Actions@Finalization$qqrv @System@Win@Comconst@initialization$qqrv @System@Win@Comconst@Finalization$qqrv @System@Win@Comobj@initialization$qqrv @System@Win@Comobj@Finalization$qqrv @System@Win@Comobj@TComServerObject@$bcctr$qqrv @System@Win@Comobj@TComServerObject@$bcdtr$qqrv @System@Contnrs@initialization$qqrv @System@Contnrs@Finalization$qqrv @System@Dateutils@initialization$qqrv @System@Dateutils@Finalization$qqrv @System@Dateutils@TTimeZone@$bcdtr$qqrv @System@Dateutils@TTimeZone@$bcctr$qqrv @System@Masks@initialization$qqrv @System@Masks@Finalization$qqrv @System@Ioutils@initialization$qqrv @System@Ioutils@Finalization$qqrv @System@Ioutils@TPath@$bcctr$qqrv @System@Ioutils@TPath@$bcdtr$qqrv @System@Inifiles@initialization$qqrv @System@Inifiles@Finalization$qqrv @System@Win@Registry@initialization$qqrv @System@Win@Registry@Finalization$qqrv @System@Win@Registry@TRegistry@$bcctr$qqrv @System@Win@Registry@TRegistry@$bcdtr$qqrv @System@Helpintfs@initialization$qqrv @System@Helpintfs@Finalization$qqrv @Winapi@Msxmlintf@initialization$qqrv @Winapi@Msxmlintf@Finalization$qqrv @Winapi@Uxtheme@initialization$qqrv @Winapi@Uxtheme@Finalization$qqrv @Winapi@Flatsb@initialization$qqrv @Winapi@Flatsb@Finalization$qqrv @Winapi@Multimon@initialization$qqrv @Winapi@Multimon@Finalization$qqrv @System@Widestrutils@initialization$qqrv @System@Widestrutils@Finalization$qqrv @System@Zlib@initialization$qqrv @System@Zlib@Finalization$qqrv @System@Internal@Debugutils@initialization$qqrv @System@Internal@Debugutils@Finalization$qqrv @System@Internal@Debugutils@TDebugUtils@$bcdtr$qqrv @System@Internal@Debugutils@TDebugUtils@$bcctr$qqrv @Winapi@Wincodec@initialization$qqrv @Winapi@Wincodec@Finalization$qqrv

vcl190.bpl

@Vcl@Consts@initialization$qqrv @Vcl@Consts@Finalization$qqrv @Vcl@Graphics@initialization$qqrv @Vcl@Graphics@Finalization$qqrv @Vcl@Graphutil@initialization$qqrv @Vcl@Graphutil@Finalization$qqrv @Vcl@Toolwin@initialization$qqrv @Vcl@Toolwin@Finalization$qqrv @Vcl@Printers@initialization$qqrv @Vcl@Printers@Finalization$qqrv @Vcl@Stdactns@initialization$qqrv @Vcl@Stdactns@Finalization$qqrv @Vcl@Comstrs@initialization$qqrv @Vcl@Comstrs@Finalization$qqrv @Vcl@Extctrls@initialization$qqrv @Vcl@Extctrls@Finalization$qqrv @Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv @Vcl@Extctrls@TLinkLabel@$bcctr$qqrv @Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv @Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv @Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv @Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv @Vcl@Stdctrls@initialization$qqrv @Vcl@Stdctrls@Finalization$qqrv @Vcl@Stdctrls@TStaticText@$bcdtr$qqrv @Vcl@Stdctrls@TStaticText@$bcctr$qqrv @Vcl@Stdctrls@TListBox@$bcdtr$qqrv @Vcl@Stdctrls@TListBox@$bcctr$qqrv @Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv @Vcl@Stdctrls@TCheckBox@$bcctr$qqrv @Vcl@Stdctrls@TButton@$bcdtr$qqrv @Vcl@Stdctrls@TButton@$bcctr$qqrv @Vcl@Stdctrls@TComboBox@$bcdtr$qqrv @Vcl@Stdctrls@TComboBox@$bcctr$qqrv @Vcl@Stdctrls@TMemo@$bcdtr$qqrv @Vcl@Stdctrls@TMemo@$bcctr$qqrv @Vcl@Stdctrls@TEdit@$bcdtr$qqrv @Vcl@Stdctrls@TEdit@$bcctr$qqrv @Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv @Vcl@Stdctrls@TGroupBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv @Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv @Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv @Vcl@Stdctrls@TScrollBar@$bcctr$qqrv @Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv @Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv @Vcl@Stdctrls@TRadioButton@$bcctr$qqrv @Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv @Vcl@Stdctrls@TCustomButton@$bcctr$qqrv @Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv @Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv @Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv @Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv @Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv @Vcl@Stdctrls@TButton@ @Vcl@Stdctrls@TMemo@ @Vcl@Stdctrls@TEdit@ @Vcl@Stdctrls@TLabel@ @Vcl@Listactns@initialization$qqrv @Vcl@Listactns@Finalization$qqrv @Vcl@Comctrls@initialization$qqrv @Vcl@Comctrls@Finalization$qqrv @Vcl@Comctrls@THeaderControl@$bcdtr$qqrv @Vcl@Comctrls@THeaderControl@$bcctr$qqrv @Vcl@Comctrls@TStatusBar@$bcdtr$qqrv @Vcl@Comctrls@TStatusBar@$bcctr$qqrv @Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv @Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv @Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv @Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv @Vcl@Comctrls@TPageScroller@$bcdtr$qqrv @Vcl@Comctrls@TPageScroller@$bcctr$qqrv @Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv @Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv @Vcl@Comctrls@TCoolBar@$bcdtr$qqrv @Vcl@Comctrls@TCoolBar@$bcctr$qqrv @Vcl@Comctrls@TToolBar@$bcdtr$qqrv @Vcl@Comctrls@TToolBar@$bcctr$qqrv @Vcl@Comctrls@TListView@$bcdtr$qqrv @Vcl@Comctrls@TListView@$bcctr$qqrv @Vcl@Comctrls@TCustomListView@$bcdtr$qqrv @Vcl@Comctrls@TCustomListView@$bcctr$qqrv @Vcl@Comctrls@THotKey@$bcdtr$qqrv @Vcl@Comctrls@THotKey@$bcctr$qqrv @Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv @Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv @Vcl@Comctrls@TUpDown@$bcdtr$qqrv @Vcl@Comctrls@TUpDown@$bcctr$qqrv @Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv @Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv @Vcl@Comctrls@TRichEdit@$bcdtr$qqrv @Vcl@Comctrls@TRichEdit@$bcctr$qqrv @Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv @Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv @Vcl@Comctrls@TProgressBar@$bcdtr$qqrv @Vcl@Comctrls@TProgressBar@$bcctr$qqrv @Vcl@Comctrls@TTrackBar@$bcdtr$qqrv @Vcl@Comctrls@TTrackBar@$bcctr$qqrv @Vcl@Comctrls@TTreeView@$bcdtr$qqrv @Vcl@Comctrls@TTreeView@$bcctr$qqrv @Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv @Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv @Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv @Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv @Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv @Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv @Vcl@Comctrls@TTabControl@$bcdtr$qqrv @Vcl@Comctrls@TTabControl@$bcctr$qqrv @Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv @Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv @Vcl@Dialogs@initialization$qqrv @Vcl@Dialogs@Finalization$qqrv @Vcl@Menus@initialization$qqrv @Vcl@Menus@Finalization$qqrv @Vcl@Imglist@initialization$qqrv @Vcl@Imglist@Finalization$qqrv @Vcl@Actnlist@initialization$qqrv @Vcl@Actnlist@Finalization$qqrv @Vcl@Controls@initialization$qqrv @Vcl@Controls@Finalization$qqrv @Vcl@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp21Vcl@Controls@TControlr19System@Types@TPoint @Vcl@Controls@TWinControl@UpdateTIPStatus$qqrv @Vcl@Controls@TWinControl@DockReplaceDockClient$qqrp21Vcl@Controls@TControlp24Vcl@Controls@TWinControlt119Vcl@Controls@TAlignt1 @Vcl@Controls@TWinControl@SetParentBackground$qqro @Vcl@Controls@TWinControl@CanAutoSize$qqrrit1 @Vcl@Controls@TWinControl@AssignTo$qqrp26System@Classes@TPersistent @Vcl@Controls@TWinControl@UpdateStyleElements$qqrv @Vcl@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1 @Vcl@Controls@TWinControl@CanResize$qqrrit1 @Vcl@Controls@TWinControl@GetClientOrigin$qqrv @Vcl@Controls@TWinControl@GetControlExtents$qqrv @Vcl@Controls@TWinControl@Repaint$qqrv @Vcl@Controls@TWinControl@Update$qqrv @Vcl@Controls@TWinControl@Invalidate$qqrv @Vcl@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__ @Vcl@Controls@TWinControl@ShowControl$qqrp21Vcl@Controls@TControl @Vcl@Controls@TWinControl@SetBounds$qqriiii @Vcl@Controls@TWinControl@SetParentDoubleBuffered$qqro @Vcl@Controls@TWinControl@CustomAlignPosition$qqrp21Vcl@Controls@TControlrit2t2t2r18System@Types@TRectrx23Vcl@Controls@TAlignInfo @Vcl@Controls@TWinControl@CustomAlignInsertBefore$qqrp21Vcl@Controls@TControlt1 @Vcl@Controls@TWinControl@CreateHandle$qqrv @Vcl@Controls@TWinControl@DestroyWnd$qqrv @Vcl@Controls@TWinControl@$bdtr$qqrv @Vcl@Controls@TControl@InitiateAction$qqrv @Vcl@Controls@TControl@GetFloatingDockSiteClass$qqrv @Vcl@Controls@TControl@CreateTouchManager$qqrv @Vcl@Controls@TControl@SetBiDiMode$qqr24System@Classes@TBiDiMode @Vcl@Controls@TControl@SetText$qqrx20System@UnicodeString @Vcl@Controls@TControl@GetText$qqrv @Vcl@Controls@TControl@SetEnabled$qqro @Vcl@Controls@TControl@SetName$qqrx20System@UnicodeString @Vcl@Controls@TControl@SetAutoSize$qqro @Vcl@Controls@TControl@SetDragMode$qqr24System@Uitypes@TDragMode @Vcl@Controls@TControl@GetAction$qqrv @Vcl@Controls@TControl@GetEnabled$qqrv @Vcl@Controls@TControl@GetDragImages$qqrv @Vcl@Controls@TControl@$bdtr$qqrv @Vcl@Themes@initialization$qqrv @Vcl@Themes@Finalization$qqrv @Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv @Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv @Vcl@Forms@initialization$qqrv @Vcl@Forms@Finalization$qqrv @Vcl@Forms@TApplication@SetMainFormOnTaskBar$qqrxo @Vcl@Forms@TApplication@GetExeName$qqrv @Vcl@Forms@TApplication@ShowException$qqrp25System@Sysutils@Exception @Vcl@Forms@TApplication@MessageBox$qqrpxbt1i @Vcl@Forms@TApplication@Run$qqrv @Vcl@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv @Vcl@Forms@TApplication@Initialize$qqrv @Vcl@Forms@TForm@$bcdtr$qqrv @Vcl@Forms@TForm@$bcctr$qqrv @Vcl@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv @Vcl@Forms@TCustomForm@RequestAlign$qqrv @Vcl@Forms@TCustomForm@UpdateActions$qqrv @Vcl@Forms@TCustomForm@ShowModal$qqrv @Vcl@Forms@TCustomForm@SetFocus$qqrv @Vcl@Forms@TCustomForm@CloseQuery$qqrv @Vcl@Forms@TCustomForm@Close$qqrv @Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState @Vcl@Forms@TCustomForm@PaintWindow$qqrp5HDC__ @Vcl@Forms@TCustomForm@SetFocusedControl$qqrp24Vcl@Controls@TWinControl @Vcl@Forms@TCustomForm@DefaultHandler$qqrpv @Vcl@Forms@TCustomForm@DestroyWindowHandle$qqrv @Vcl@Forms@TCustomForm@DestroyHandle$qqrv @Vcl@Forms@TCustomForm@CreateWindowHandle$qqrrx26Vcl@Controls@TCreateParams @Vcl@Forms@TCustomForm@CreateWnd$qqrv @Vcl@Forms@TCustomForm@CreateParams$qqrr26Vcl@Controls@TCreateParams @Vcl@Forms@TCustomForm@AlignControls$qqrp21Vcl@Controls@TControlr18System@Types@TRect @Vcl@Forms@TCustomForm@ClientWndProc$qqrr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@WndProc$qqrr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2 @Vcl@Forms@TCustomForm@SetParent$qqrp24Vcl@Controls@TWinControl @Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@SetParentBiDiMode$qqro @Vcl@Forms@TCustomForm@GetFloating$qqrv @Vcl@Forms@TCustomForm@GetClientRect$qqrv @Vcl@Forms@TCustomForm@DefineProperties$qqrp21System@Classes@TFiler @Vcl@Forms@TCustomForm@ReadState$qqrp22System@Classes@TReader @Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation @Vcl@Forms@TCustomForm@Loaded$qqrv @Vcl@Forms@TCustomForm@DoDestroy$qqrv @Vcl@Forms@TCustomForm@DoCreate$qqrv @Vcl@Forms@TCustomForm@$bdtr$qqrv @Vcl@Forms@TCustomForm@BeforeDestruction$qqrv @Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponenti @Vcl@Forms@TCustomForm@AfterConstruction$qqrv @Vcl@Forms@TCustomForm@$bcdtr$qqrv @Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponent @Vcl@Forms@TCustomForm@$bcctr$qqrv @Vcl@Forms@TScrollBox@$bcdtr$qqrv @Vcl@Forms@TScrollBox@$bcctr$qqrv @Vcl@Forms@TScrollingWinControl@AdjustClientRect$qqrr18System@Types@TRect @Vcl@Forms@TScrollingWinControl@AutoScrollInView$qqrp21Vcl@Controls@TControl @Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4% @Vcl@Forms@TScrollingWinControl@DoGesture$qqrrx30Vcl@Controls@TGestureEventInforo @Vcl@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv @Vcl@Forms@TScrollingWinControl@$bdtr$qqrv @Vcl@Forms@Application @$xp$15Vcl@Forms@TForm @Vcl@Forms@TForm@ @Vcl@Clipbrd@initialization$qqrv @Vcl@Clipbrd@Finalization$qqrv

borlndmm

GetAllocMemCount

kernel32

FreeLibrary GetCommandLineW GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetVersionExW HeapAlloc HeapFree InterlockedExchange LoadLibraryA LocalAlloc LocalFree RaiseException

cc32140mt

@$bdele$qpv @$bdla$qpv @$bnwa$qui @_CatchCleanup$qv @_InitTermAndUnexPtrs$qv @_ReThrowException$quipuc @_ThrowExceptionLDTC$qpvt1t1t1uiuiuipuct1 @__exceptionAcquired @setExceptionFuncAddr$qpqp17_EXCEPTION_RECORDpp4tpid$pvppqqrp17_EXCEPTION_RECORD$v @setRaiseListFuncAddr$qpvt1 __ErrorExit ___CRTL_MEM_GetBorMemPtrs ___CRTL_MEM_UseBorMM ___CRTL_TLS_Alloc ___CRTL_TLS_ExitThread ___CRTL_TLS_Free ___CRTL_TLS_GetValue ___CRTL_TLS_InitThread ___CRTL_TLS_SetValue ___CRTL_VCL_FPU_Hook ___VCL_add_EH ___VCL_clear_EH ___VCL_init_except ___VCL_init_fpu ____ExceptionHandler ___getExceptionObject ___raiseDebuggerException ___terminatePTR __argc __argv __argv_default_expand __exitargv __handle_exitargv __handle_setargv __handle_wexitargv __handle_wsetargv __matherr __matherrl __max_dble __max_flt __max_ldble __setargv __tiny_ldble __wargv __wargv_default_expand __wexitargv __wsetargv __wstartup _abort _fflush _memchr _memcpy _memset _sprintf _strcat _strcpy _strerror _strlen _wcstombs

vmprotectsdk32

VMProtectGetCurrentHWID VMProtectGetSerialNumberData VMProtectGetSerialNumberState VMProtectSetSerialNumber

Name

.text

Size

21KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

27KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

53KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Licensing/BCB/TestApp.exe.vmp

SHA256 d0738b66c4fd955e9b9fa5e06b3ac541e1e37e5e4af24939391242a4ed873515
MD5 d272bad87f4b48b364c5fc683ebd0c43
SHA1 e7028545c40b9e7944e1d951a7745cf061ed7aa1
SHA512 ba5872739e597b339c0c222dfb2294924c5e08eef4ea076dafb3f0ae088eb71c44892f9eb83ceaf5f8ed346ebcf3394bf335ae685295a5c5b8a0125995f7fa8c
TLSH
T19F51E700F5ECA825232B11973F864CAFAAA0D378852AA50874B862A3777CD250B9719D
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/BCB/TestApp.map

SHA256 95878d6e5f2006270547e3a55864e8b8a364a94e367cf39da25664c9efb2161e
MD5 0c9ea58e4ccc1daaf623e941ed138884
SHA1 5ea14cbbdce364e0307dff27313bd3bc219f4007
SHA512 106d938e0341435476a27bcd1463690e0a7d640f9f797dd245ce7158ab47e99946b55cc2ec862269975944ff9e71762a87128be500d2ef5bcf4130178d0507dd
SSDEEP 768:7RPxdG/d9QY3P3T3GoUXMhD7h3T3tY35MzWwX8x+Bd1LNiy:1PxgDd/TGXM/Tm5MXX8GNiy
TLSH
T11B23677021AFE0D1D027B2A1FAA1FF958065F4A39CF2B84633E8271555571ACDA33B4B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/BCB/TestApp.res

SHA256 d2a39b36d2ea96c650e015da5666045773d285dd610b66f32f783b66ca12ede5
MD5 898b7d735f370a06f87ff9ef2bc48905
SHA1 9fd64bfea353ef474a91c7339528f49821b00e45
SHA512 249276a20fdc6764bbd9e29635fd1cecb873edf88b68a72fb89645cc7b83e2e6e7affa3687d2316760c442277edcfb9c73f781103b6c177cc4c4975dda3c1447
TLSH
T111210E0293E49616E67203B129F2D362D6986E230D6E0BDE308C275F6F35507C6836B2
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/BCB/Unit1.cpp

SHA256 e1d4de9491ab0f1755aeb873da899c8ba36207795f9d08fb0998944b050ab3f4
MD5 55f47c162be125211eafee97523701ed
SHA1 5cfb7bee6987cf7eece93103350a48785f25db10
SHA512 5e1c228e71980a530d3770798cafd15d0f5bcc8de6798f1e5ba647e85e0aea4cc108009c7570fead81fa245b935458f1dd21ff7454ee4892b0b425f2730b488f
TLSH
T1AE71FF7A3D11A05BC090F31A23FC4484FDC1C0B97EA09B6A73E8835224B752D9B7DA95
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/BCB/Unit1.dfm

SHA256 147606256184bf7a6b015fbc06a6ac1202a7f80e44c263220a589c5b8202fe13
MD5 53671537178dc3fd91b6a10f0f67e07f
SHA1 32c6a23a7a26f44f222ee66cc8316345fe8f308e
SHA512 633ea225bd9368251c640d1265e745255581d186a01aa933ddae146e7638c34a97191896523345cd3e552bbfdd9e9d3a8236765993c3d6245438e419d3746a3e
TLSH
T1E331ABBC5314B2045DB6D20744AB1E8ED0A93693804718357683CDDCBFF2B1977D6296
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/BCB/Unit1.h

SHA256 62bfc6fe615a6f082b8680b3542e7ee4443dbd3b82695b29c22400756aec89bd
MD5 433937c3e14af878d079c480b2346555
SHA1 74b87dfde233c5e4d160d89f9c4667bbc959313b
SHA512 a4ffdc84f13aacf77ef41990b56a8784c7393134c61f7e482621ac52f6b18ef122c0cf059c552e7d4bb52dd7909e727c509aeac90987fe461c53af4be8e351e9
TLSH
T11B1190B83E4C80728010F238C72194B2D29EA1308BC6A91EB17F54D28554160335F795
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/DDK/MAKEFILE

SHA256 0350066fc7cd89f3db46317311dec536364555c3d60a9c39226cac5a7e53531e
MD5 277517b4ea054b293c4ed298ff2c79eb
SHA1 f0923275b362e3a05ac77fcb6d3a12e18cdcfad9
SHA512 b0b0284287baa952b353e255981ab5ba2782ad2e64cb15a8f2f2b8d096b57cb760f0e926d0f43f0b07a701e2e6dcec7dd40e747b8ac1b89f517e088680297bcc
TLSH
T1C6D0955717F8F931407071006F17379B725260BCFDDB923850107469336B4358155EC4
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/DDK/SOURCES

SHA256 b9bc55cd4546f643d17a7a12bc22eb0baf690e0b8875c2e3d51fe51db881c037
MD5 9158c7f41024e2a06d6cbdd3bf30f0cc
SHA1 b6ad9633f700f31052aeaa802775eca31a30329b
SHA512 4823abadbb857f1fcf032cc20f8514fd284ab47fd66d4e3dbf47a69742b74ea9b6c64596812308e5ca349744873a7f24acbae3c0c0b25088b99230d76003c17c
TLSH
T15CC092B6B3317B4730C756CE7C49BDAA594A4A5048AC88BB06EC07B59BD63EB6690013
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/DDK/TestApp.c

SHA256 6d17b5d6aba656cdc264d62740c6fa400762efc0f89b5241ef0929b88beadeea
MD5 612f5294a928e130c3295641af75019f
SHA1 fa3167346dcc873cd56d8636e019aeddce3f227d
SHA512 e6fa2d75926d026e4316b6a92c2e3aa768c6df523c6527ee1044a85db5189968688717249d3051f754f88d781200afe7773d6a1b89439ecb4f0235ff91888fc1
TLSH
T1FD51EEEB0812A8DF94D13261113E48E83ECA86743BF2D2656180E256717F25C973C7AB
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/DDK/VMProtectDDK.h

SHA256 e98615fe5506da30061c63a3c6a3b1dfd23892f783d1aa6a9e4fe891a59f2283
MD5 28f7681c7317ba191dcc8bf36a6f6455
SHA1 917c2fadc5e6ce96d52d0a2ca20e5436ec83d90f
SHA512 6fea13ca6a2c55817ca968cec02df016b9d66f99f1dea71734d9de02170aa1817e7ac69f631810d5af25eccab298e4df89f5a2e59ec9ffda16247615c08bd41f
TLSH
T15561BD410D01306ED192D7F56737DC6225ACF12335F6EDEB220A24151BC354DABAEAAF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/DDK/VMProtectDDK32.lib

SHA256 1f81028312343198a11adee92d41d677458c2f1199e9562119858f64690c8d9e
MD5 da56d6b2fffe23163f158c9d7683700c
SHA1 ed812537992d722095c236db0427b844043c1f15
SHA512 2257cec02e592d841a0df5d14c769a655301e1950b3d91ae555abfd51b3f307e3750d7bd11b20e3c25945d73f046184958333ce3551d4d69fc2e8430addff656
SSDEEP 96:Skm/+uYlVlQKU3v/hknm/KuK7KRulo+WlqnT:tVlE/h3TO
TLSH
T175F1A8378C12BD1FC4FAD4FAE696DCEC39AC304A22F2D127751C448593E50AD7A9A04B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/DDK/VMProtectDDK64.lib

SHA256 1cfe9490aa9991d1327260607e97831f4fdc172df5a182a8f7ef6bd59a0ab75a
MD5 02e457533b7776d2ce15a3a3486b0a7e
SHA1 ae1d39b93035857b1a6e316a7842b59a64f92f9f
SHA512 84b8178eaa6f8bbe9dcc75b9c5aa92a40b1a27627712de74e2ba6cae5663eaf0ad1a682b6fb467473420e242dda2042b6e63f57815f3a257cb124623f2a741d8
SSDEEP 48:IZj/k5RLRzRCRXB6cI15lXy/F/CRcRj15T1sRLRyIBrjX4nKryAOFsgKer5PKylZ:INkqBb1CrMnKeKwKyCsuYgJt0
TLSH
T182E13A399C52BC1FC5EAC0F5AB25ECE93EAD004212F1C55B7C4D1A5187A236F734628B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/DDK/bin/i386/TestApp.sys

IMPHASH c1335faeced066df9bbc6e5efb7d89a9
SHA256 4cec6e3d2f9b7ebae6f4add1311f7b7a37bc29964df0495ae32f8820ce57fcef
MD5 240e80f81fe07673cfaa2602d9642a3d
SHA1 84440e54d4ad9357759b774f062130794bd28358
SHA512 fa5e64ab00ec82909e17c5d912489b69987d3d593ae321123583badecbea85cbd42e8ad85b1e6ab7ae4231d7c89ae2655d62b9f12d0bff3a5c0f83ed0ded22d8
TLSH
T104817402650470A7C8E931F1216FAD25AC85CA7217B3C3967F6162577836698BA3838E
MD5 SHA1 SHA512 TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

3262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\DDK\bin\i386\TestApp.pdb

VMProtect 3.9.6/VMProtect/Licensing/DDK/bin/i386/TestApp.sys.vmp

SHA256 b63086d2ac58f3f25a268eca486133ee1e369ff960e2dfabe5fcf3c4c9019ccb
MD5 340ddde18074d4f4b55c6288656d2aa5
SHA1 7d3606449f6388af1bcd05d91a4eb804835a0fa0
SHA512 b5faeebdc943552cea228db67840a9773c7786b686b82e2fb4a5a3fca8a060ed2e7ff258000caa95c068589c19bd2b2fa72f1f94f9ef568a4bd41c33b670f0a9
TLSH
T1EC410850B8F41C26276F11967D478DAFAA40836D862DB64830BC63877BBCD360D47448
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/DDK/make.bat

SHA256 fe8ca43b8b675828a8718c8f9816fda173c32256b477dd5ac8ca7399dd4e5116
MD5 b29e6212257853433772d102f750f5a6
SHA1 64ff87f17741afccbe1ce398fa3c10d7599122a3
SHA512 240c5055a1129c8b8989042dcd4f0dbf1c15be692f78c5234167209c565f19d4a9b930245f337057617666c1046578b72d6b07fc37bc4b98d8f260c0062db8f6
TLSH
T1C0C08C9F0903408226251B8FB3090D0602FAA0113265C94E36132108BEA8ED67F80EFE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Delphi/TestApp.dpr

SHA256 eac1a1ecc75b521da0f391828b3681772b573c00a26f3f6608a0f43ea41ae03b
MD5 966988f3a281a11c189cd88450540215
SHA1 c75b8ef7b8b5be8d46272ac5a126070390887f73
SHA512 7d906579f9b373f79d4135d9cec31ccfb72078705e12230fe0506934f194585f3cc531fdaffaabb8f2605e9ee519769c7d937d704bc8c89a6938ed072b9652ac
TLSH
T1F5D0A7D717EE40C359F734B3391E98816062C53C4C80120934A99896840666DD343355
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Delphi/TestApp.dproj

SHA256 dd74cc680b0faf11df6d9372dfcbcc2aa7d9f0f394c7b66773039219a8065925
MD5 0e771a636fa41ddf7708f0f6a5da1761
SHA1 68800286948293c7eb9a093ff1e40c0c7a6ddd06
SHA512 0833b05f16748e7c819b71ab066cd4db2f8cb50cec034db10ab5ffc2db3edf017564dfc8819d1177dbfa2639ec0c4af14c53af97d277adbd351ad90795d9fc10
SSDEEP 96:tiz/TGfIOt/ClGxOBNJ7LQB9DYE17JViLvm75H617GC:4z6J68OkJ7JViLvm75H617GC
TLSH
T174815724798C2DA882DA527F4E363440B1BFEFBA16FD9818F5F5B13B635271D2002971
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Delphi/TestApp.exe

IMPHASH bbe6bbe2bb17a0cd01758afcc31fe177
SHA256 2da43ba896fb35d40555cb641a94b1c74c9568e461591d31cb141bc834336eeb
MD5 047322602082c74caa337004efbc72c0
SHA1 8671d39e04ad3b4c005ee7c1b2de0c43c5639bef
SHA512 12fd11383771da4add1a6b9cd3186d9c854ab35abcbc5209e844db8e3bb76777fb52844b2d876df1ca7e858e54216ff9eaafaf7005b18f95832c440ba496a61d
SSDEEP 12288:OrySorhhzNWWJVNwf/WGXJ9yipE64AaSoJ3O945BGSjSqjOpeFCNMM988888888R:iKhhMWJ/A3Z3pE6erG6BGSjSqjOuCZ
TLSH
T15F055A13B291173BC026D63AC96BD6A4DC3BBAE02F965C575EF49C4C0F39281283A757
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

724048

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW RegCloseKey

user32

LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClassLongW SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClientRect GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CreateAcceleratorTableW CopyIcon ClientToScreen CheckMenuItem CharUpperBuffW CharNextW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrcpyW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc TryEnterCriticalSection SwitchToThread SuspendThread SizeofResource SignalObjectAndWait SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile RaiseException IsDebuggerPresent MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryW LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTickCount GetThreadPriority GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateThread CreateFileW CreateEventW CompareStringW CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetTextMetricsW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap Chord BitBlt Arc AbortDoc

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

vmprotectsdk32

VMProtectGetCurrentHWID VMProtectGetSerialNumberData VMProtectGetSerialNumberState VMProtectSetSerialNumber

Name

.text

Size

697KB

Virtual Size

696KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

670B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

63KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Licensing/Delphi/TestApp.exe.vmp

SHA256 4c8b398503e15595bc5e859ee3b114f621954870cd8e792b090a5cf2b47e6ff3
MD5 e8cee40a6ff0aeb3f36ae408fb8e8ad8
SHA1 1629b8128e59b48aa4ba98cc39bd7af621215e6b
SHA512 4076e58795ecd4ed9bc849df9aecb409c32ae1b1d6e0457223ff1f0f8b675c26bd6a3fd94dd1b364d07c581fd8a7d2b7df9b1312115375e083bc0080a5343e15
TLSH
T1D051E850F5FC2C36236B01973F864CEB6D91D368C62E6508747862A777B8D260E8B1AD
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Delphi/TestApp.map

SHA256 d030cda2666cc8dc3001ad66bdfe1d8f860789fd36666fa110785916442740f9
MD5 ae9c101874eded510d5ec6608200a51f
SHA1 1c36071d37dd15982de2c66b4c0521ebda94850e
SHA512 1f3ed46db32fa1a08f3b9d2c52269d7e0cc974715388604a536c25441e593db0fedea37415ef631a6c4a184cae0e09466d5e667fb4f0c1082f7f032b9161e67f
SSDEEP 3072:yH3Vx/jjJgD1QLEr1THCQhHzjRreF31vSVtQNBQLjoHXNOlcuWjRiQt/yyQjm8PC:LnYMcqc
TLSH
T1C7C44374A8AFD2E08853D556FA56BF52445AF6F3C5B20A1B339CBB08638505CCD9332B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Delphi/Unit1.dfm

SHA256 fa4db7abb23943032ca3a9ba8ea094be8fe0c4849d243fa49725bfd02a212828
MD5 210fb70b5f5f67d6df3195ae25a9612a
SHA1 adf459faf8e9b3aa95e3877a09495acea9168532
SHA512 2b180e3e1fa60e1826e52639e3e76f2e1aa0f2b5655efab01933e06b1e812034ab41cb7bb72a21c6e955705d4b57d98beb52fcd594b92863f7a23734c97a80c7
TLSH
T15131ABBC5314A20459B7D10344AB1E8ED4A92693800B18357683CDDCBFF2B1977D9286
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Delphi/Unit1.pas

SHA256 2ab8683e0b7830a964bbb0d7fd1f51b7f4ce638e93986bc86e93b20b8b8d0aa9
MD5 9b7fd3d70ee9fce83e76c2b3dd4d9687
SHA1 0a1bb36a730427c90d02ee0c07a6f4ed187b1c29
SHA512 7850cd44a98753d50a0953ff472577bee09be415343a935fc63dfb4816b29edc32454304ea386135908ab0ad41abba565d6d5cd0facff6293a93f9021051a1be
TLSH
T1EA71E0620620A1BB88F1A165331A54D1ED80C1227A5897B671DCD3460FBBA5CF6FC7BE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Delphi/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Delphi/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Licensing/MSVC/TestApp.cpp

SHA256 8aaf6a441d02b76568ad91e8b85ba007c772ae2c14090b1cc1f569c8522ba4a5
MD5 4157347aa2bcbfcd01dbf0f0f285c8fb
SHA1 67efad477a2e2580342a6a7ae25356553179676b
SHA512 bfed77c52a7ada4628c20080a54524b81d98bba53bd71a1952b52a4361886676bf7ff9431c5f4c606ba75b50be3c8916835ed4811347c00a43697d6f3e5f0432
TLSH
T167815417601EB9BEDA7617202636B6353C3B858464A3A062B1497329F7524E8D238BCF
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/TestApp.exe

IMPHASH d459861a2d3c1b915fecfb235adf0ae5
SHA256 8a4c9ea04610c4f6bafc03d59c55acc2fc5cd5db696e3c5023dfbe9666138a10
MD5 cd4574367869ad8be024572b65312f19
SHA1 a416742807237b0c88f461e4c5e37b093444b40b
SHA512 e3560a4e5b142f4de4f2cf0a1ebcdbc2b9ccb0d289f4963e94ce7a4d233c395e644a0dcb4207a82dc5af1da84088c9df18feeef765858e9e52f3e4e1fb983d05
SSDEEP 12288:ZSgSbHYUVii3uuJbVS2lwbVsbnNfAMmcyfSifU:sdc2lsVsbNYMmVfm
TLSH
T152050801B7A15018F9F716FA99FF3068593DB9E01728E0C762C46AED9625AF0BC31B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\vmprotect\examples\licensing\MSVC\bin\TestApp.pdb

user32

GetWindowTextLengthW DialogBoxParamW EndDialog GetDlgItem SetWindowTextA MessageBoxW SendMessageW GetWindowTextA SetWindowTextW

vmprotectsdk32

VMProtectGetSerialNumberState VMProtectGetSerialNumberData VMProtectGetCurrentHWID VMProtectSetSerialNumber

kernel32

CreateFileW DecodePointer EncodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapQueryInformation HeapSize HeapReAlloc GetStringTypeW SetStdHandle IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW GetModuleHandleW GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetProcAddress GetModuleFileNameW InterlockedPushEntrySList InterlockedFlushSList LoadLibraryExW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetModuleFileNameA GetModuleHandleExW GetStdHandle WriteFile ExitProcess GetACP HeapValidate GetSystemInfo GetCurrentThread GetFileType OutputDebugStringA OutputDebugStringW WriteConsoleW CloseHandle WaitForSingleObjectEx CreateThread SetConsoleCtrlHandler FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW

advapi32

SystemFunction036

Name

.text

Size

605KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

143KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Licensing/MSVC/TestApp.rc

SHA256 07cc4993dd7d391c8799881ba783d304b6a147a11471bcc61f33ec2b00a470f4
MD5 940a01b5e7caa1d991072712a44bb0ad
SHA1 1c27a8eb03ba4c6d46e81eb85fe71c3804b00197
SHA512 87916436edccf1b52cb5e603a000f93ec225568e89b9d17e271d83e36f9249ccdf41baaf91f6c1a397e8dd4b77d31fd1f4ccb98f092ad3a4d07a9b901b700e58
TLSH
T13D510021488296338B30F0F26D017F1AE22C5A3F5A494724B25DB6EDDF33969139C4AE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/TestApp.sln

SHA256 d5f97ffd30ae1374ba54121dfeb177917a4649ff9db80926b5044595837ce107
MD5 e3a8b772f8f3bfcfa9f16f4b6f19b239
SHA1 954a193835940c3f42fc651a40d6736f44aff5e3
SHA512 52ae338c4b1ff62100630fa25865c1a94998cf107a953755763b2be4d48a7cd1569c36b2ce25d016b7a0a2dcd787e520e6f7e390583eaa0ac287f331eada1ac3
TLSH
T1D0113A98201FEFE12A86059FE5F84DBAAD3342A181984A3C045190FCDF16A57C21758B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/TestApp.vcxproj

SHA256 21a3b1fc21ea9cdd168e87298d58fba70476e2094e3bf58a5a63a1735ac19415
MD5 982dfc79b75a1049d32c9c15f859ae69
SHA1 c9ec87866d778b78618c78025e309e11fbe4f9a3
SHA512 447a5dae65d612760361077ccb55a162ab69d4f0809375a736c9b88135e064c210fbb96d07848db93b8790fae5666e8f52b77f89a3e41bc91016ede9a2d41b31
SSDEEP 96:i0/z2scfNPRtTCyaLDyaLDmVynp7uZ5AXZAl8N:z/zSvJyp7F
TLSH
T176C1EB55A4C46C0A817B8227E6EB9982EF31D3830D594C6CB9AFD35B5F735847207B32
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/TestApp.vcxproj.filters

SHA256 46ada655cf451d1baa68e08d529ed0e15a0787236c50ccc12ede1937c12f76ce
MD5 c42b0bb136509355114e69100e7160ab
SHA1 8b6630f9b25d0eecb1a12d56e9e6bbc6a3de368b
SHA512 5c9397fb0400acc6cb95221d1af062bc98a3b6a059805e4090ebbcef8025cd659da1bd7ad128ca23fb779b5b14dde38ee17f8b56dffc211d9104b067bfe68119
TLSH
T14B213B31C4DC3B4C6032995BFB84DD15EF68B3E350921149B6A9E1076FF2619D227A68
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/VMProtectSDK32.lib

SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
TLSH
T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/VMProtectSDK64.lib

SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
MD5 32599fe22a118732b9261e1fcd4f94fc
SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
TLSH
T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/bin/TestApp.exe

IMPHASH ae2c24d912079246eea215f597cad7bc
SHA256 27040cc4bf7feeb79941ed94fa06628a0c6095430cd57f1dca08180e0cd77b44
MD5 34a97d2dedf175eb29b84299624e0b4c
SHA1 50d73f9e0bd7c06177f78a8bd0364201758de982
SHA512 6a40cb75dfe43d1f4d257fdb5ff830a486b0dd5407bd00e381d6d541d9f7ae9d05b5e6eb7593dd2101776dd913c48eb41385d4ed268d6e72d092750780f42436
SSDEEP 768:6jfSdGtUyIzKviN1myn7Kf7ip76FEhaSHhgvt7kuyCEDDXnVPK9LD9jmQ:8fVVYKaXmyO7iAOa5vt7kBVIDJ
TLSH
T133335C1279E1C072E4A215300970C7A29B7FB93396B5C6CB7F4812BE5FB17C09E69366
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EndDialog GetDlgItem SetWindowTextW SendMessageW GetWindowTextLengthW DialogBoxParamW MessageBoxW SetWindowTextA GetWindowTextA

vmprotectsdk32

VMProtectGetSerialNumberData VMProtectSetSerialNumber VMProtectGetCurrentHWID VMProtectGetSerialNumberState

kernel32

InterlockedIncrement FlushFileBuffers CloseHandle CreateFileW GetStringTypeW LCMapStringW IsProcessorFeaturePresent WriteConsoleW SetStdHandle HeapReAlloc RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer HeapAlloc RaiseException GetLastError HeapFree GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize LeaveCriticalSection EnterCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar LoadLibraryW

VMProtect 3.9.6/VMProtect/Licensing/MSVC/bin/TestApp.exe.vmp

SHA256 9a4de398129e940f2dbb735260b9d1b31cc5045f2ba6cd375f723a81c13acc04
MD5 3e3d08f8197f60b9578f4afaea36f614
SHA1 468c66e3219088d0ce47ad4a97cd6dc648775d32
SHA512 aac3f2006736ccb4503963f952d8f443c0c817ad38e3c4ce374d89f762499587a7af3e0ede5b8aec6de0461fff3665b2eae4758dab2240d1e93b4cc370eb250b
TLSH
T1E9510840B8FC6C35236B11973F868CAB6ED1D358852F6608787C52A377B8D210E871AE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/bin/TestApp.map

SHA256 3156299daa688ce50aa56de9c8486cfd37ce4d3715abe25c7d8a312bdfd834f3
MD5 1473c4b46794d130c7eb676f23020ce3
SHA1 0ed8efa6a2fe198082993608df2682286d9db697
SHA512 ad503fac9b087458de12b74d45122835a3ee574ad9be35aa961f8c8518b8862f663d455f878a99a9120cb6c72e6a5f5428d557eb9944c540a2a01a866e1e867d
SSDEEP 1536:K6kuaubYnKQhX6SzTQsybNhKgMQDvsHxrv62NPvc+FXyb:K6k5ugz0sydDvsH1v62NYb
TLSH
T14963273130CEE8D2D14D6682BB65FF68E149F41341D206D371ADA7C1E3EA39AA65E40F
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/bin/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Licensing/MSVC/bin/VMProtectSDK64.dll

IMPHASH 1851ff453adce0cef5274e320d5bed3c
SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
MD5 db4f1a1406d292162a3b99d1fbb74822
SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
TLSH
T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Licensing/MSVC/resource.h

SHA256 be276546e4707df7945f32244edbffc9d3867365344a208580bec2c6c2260188
MD5 1796d5d70135fcc7fc83f34687d0b8ae
SHA1 fdc70a005f3dda3549dddfb800500635071cadd7
SHA512 6b9f35aac91ecdc683a73a46e62486011cf0ebaa3fd00fea7bfb935cd1c279635d95f968514c724de0c9af2671ed95bfe73be6eaf56869fc7514d5a54aa23097
TLSH
T17511D22D0CC894A7A878F1C500598702198DEC6799A886EE32CC6C9CAF2611113FF18F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/stdafx.cpp

SHA256 7984b34b315b31cb55894b0e97f3d8176d2e7cb321755605afbab7654911773d
MD5 8d5aa277c51e9ff821f340c97431e2d4
SHA1 0ff597390405911258d9b7ec4ea620e98034a241
SHA512 fd2151290e60fa3fd50de68aff72e24bf0dde4d9ac5610dd14896d129b1554c7d979222cb5e92c8cd5b1f630569d1a30a867c926fae59901e05a6621c0ddb3b7
TLSH
T1C4A0220088380000B08020C8B000CC30B808F2800B00008C00832AE800288CAAB0220C
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/MSVC/stdafx.h

SHA256 ca63f206b8b2e44afb5228df0e14d85e55a4a65933fc240ccb0ad9a01de0401b
MD5 b442f65fdda7276e9b25fee8ecc882fe
SHA1 84ce3728f1ba97700344c3daf0c1f28b19fddcd2
SHA512 0503105a5d446d69fd88657251a37071e533aa72867aa64a848aa5fe2bf6687b65c7d97ef194b2c0d001a0dadac57d18f01483e375911b978e34622843078398
TLSH
T1FB21B101DCF8919185B014907885775BF68D361306982BEDAC17B4993F5B00F43DA9FE
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Form1.Designer.cs

SHA256 44b0daf302cd08dfc7f84deb642beb3cd8aecc9d5234398947e274c69f7f76cb
MD5 45188230b275e44b3ecf6feabe5963bf
SHA1 32f1a08d1adfe8dcd5692e3b663e64423e00b834
SHA512 dacdaf2252b27e21ea9388e2cb389c9e63063b4c8ba67868b5e54a9d80c068ffb591031f7f6bd2e2a0bff2fb1fd5d2e6139646f8f1959a400a426b1b2b3767e8
SSDEEP 192:swa+JyOYeUJP+meUgrcvmGwfPlY1GqwqtumUwv0KseUd+byzc:sw1JyO+P2r3PWHtZ0n+bEc
TLSH
T135E18974436E8104D9B1718C8F0A96D0ED65823B7926ED6CBCCF4AC0DF722345379AB9
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Form1.cs

SHA256 4d386062471b6b3cb8af4ebddcd5f3017252630683b5dfa86a7473dca4493b0c
MD5 4af31584ef36e1a45fa10499b0290a46
SHA1 a3547a277ef15b72b04cfc36eadc278f6a8409c3
SHA512 2e8cfb290fd7da7488f9a1a0ceedf56a90efe050c9874f16358120147b7f8ff03bf487efd2c6d9bb54e3e4cd735c70164ed569bda646db8739deb40bc317bb99
TLSH
T1E351D11812353EAE947231BAFF126C76FDA150370D7A630379ED84458F35800F269F99
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Form1.resx

SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
MD5 fc75f378d77f29ee452970be2bf081e1
SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
TLSH
T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Program.cs

SHA256 d80b1a72451c1e6f8001c1febf33fe5bd25e65c6c36718cf266e5dc263ae2ad1
MD5 3df436d7dddf6fd44d552abda68318dd
SHA1 e887a6f579a41209389bccf9428984d13d690682
SHA512 8952b8c15759ec65f1e7058d21807aaf5d66d36c33e26f3f1b7083bdda83b511f95cab45c168a4db3bece2ae266af7ee237b85da99321c77d429c7a9b217732b
TLSH
T174F02BA5315DE3940EF351F75715D0C8D773253F4AB6B410B46D0A41CF36045433AD01
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Properties/AssemblyInfo.cs

SHA256 07ea7af5d9c4b57e1cb65f3f8556b5d1d4edb71a6eb5d3f998444b4e809349b4
MD5 51adeeb4596f9759d8870ef725854c9b
SHA1 58f3fd732a695bad7819460e776debcc8415b415
SHA512 2edc74d50fb32e91804fcac075930c8a667fdc0e66af6e832d0cd67e51375ce756409c00a9acc535c7b76c18f315d8b4ab565a4cc530fd21c3f40cb16b596cb5
TLSH
T1BE215C2D6741A37E8F510493AE6B75C583BD636892FA0C0529B8B453F301B7843A99BB
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Properties/Resources.Designer.cs

SHA256 665bc730e6e2528c01381064c4c06251a487096bb8df7712c3d34a90824d6e74
MD5 0c4557f794fd0efd4811f426828d1489
SHA1 20f201e98f4ae43838e4e150d57bf84cc58682f1
SHA512 2cb823ffc7dc36379bc76b6f2d3034b7a3ac738d62d81f1b92e3f78437463c98295f29108c136c6684ce0e6085ae4bc02d06502e3b5c50f5c45326d4ff56ae47
TLSH
T12D51A8B71F95C1334835D88B8B01F841CB662123CA7CD574B8EE02640FB739443AEEAA
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Properties/Resources.resx

SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
MD5 0cd8c971317d19bbed44757809bcb92b
SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
TLSH
T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Properties/Settings.Designer.cs

SHA256 3d087aac697ccbd34bcec6fa52c8c9cfdfb3d8b2d8d672a614001db00120b6c5
MD5 dea91091bb3a8a72624c80dd70b3056e
SHA1 3467671a9967520994d2ce94eecf62e71f448eae
SHA512 2ac8eebda35e83931e178ac3f24c28f36e81a083f19c9108b5f1ebcf24684ee7292d60b6416094dc3edc80d8b4bdec0134eee3939d5927aecd9cbba2e6d21124
TLSH
T1D311CCF62E9287370672E5DADA05D163CF32522BCB6E9435318C0205EF2654483AEF99
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/Properties/Settings.settings

SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
MD5 8c0f00d7d9b0046695a0255f1b11b061
SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
TLSH
T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/TestApp.csproj

SHA256 ba431509a06e2fb8f5024682cff0334fcf3c8e1767d39c7db80ebaf48c6d10ae
MD5 d525fe57bf7547ce3afc20c0920bac0a
SHA1 514a8d7923aa4676405b3f0f2d98f8c2c1d74a09
SHA512 510bffecb4b99d82de9b1a2be8fba69ac22be1680d782d0f78a643f48deb574ebcaea9173b726dd26518c4da8112bd4ee81a53811def15fc373e7c35456753c5
TLSH
T10A710234E1DC6DEA03B16172D6A3AE01DE68A3E314740868F59CE64B4B72A941247B7B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/bin/TestApp.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b31b907c41e4a8d6e160ff1cab2178a05155d38aaeae87482103401b42f1c9ac
MD5 717506624a3cc77fb5b3cda9df3e9523
SHA1 68b6afcdd7e1f9866de18b1f8ed19a2233d8f28c
SHA512 b00f7f30f6d3915c1bc6cb0f827808d420411184daa73058c64729344abaa2942146887df57978811ca0f24f59737ee7d9cc9909bdcf3a1adb7b449647949e7f
SSDEEP 192:lxkUcadO6Vy49K6KLc+IPjSGnJJO95edM+E+je/a7m9lcujg4c:lx1cgO6Vy49K6KLc+IPjSsJJOidMM6/f
TLSH
T16732C455ABFC9727D4B627B668B23A400B72F6564836DB2F5C8810CB1E637401B53FA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Ivan\Projects\vmpsoft\vmprotect\examples\licensing\Net\obj\Debug\TestApp.pdb

VMProtect 3.9.6/VMProtect/Licensing/Net/bin/TestApp.exe.vmp

SHA256 bacd539a0d9120d270432ebc9617d8517a8289fbf392028e4d7388615e371827
MD5 c205712b48b565bac062c0f4c1b41cde
SHA1 fe697728c516aae25588ee12311e9dfbc39005fb
SHA512 87d2a5ac739ea9a0e2e76d951e0dbe060d05dfe5ea17cea8549586f98256e3c109ef16eeedc7168aa1d6b9601db42e8a671100fa2e2632687ff45cbbd5ded2f9
TLSH
T173410A1568F42C362AAE22D53C4A8A5FEF54826A87187749307CB2433BBCD37464B855
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Net/bin/VMProtect.SDK.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b560d162c060b9ce441a8ab9a4ae9d4e0a8121145bf443789c2d978e5f645f75
MD5 fb3f3c72e482cd1014dc0b6daf857421
SHA1 1dc14bc418aa4985dc2cf1621d7cb7c6409da0c5
SHA512 72f55b33826c75aca5dfb0b991722e83dd910cf36d6199159bcd5bcee078dfc407ee16f0855fd3274b6829a39b37ca722c45dcc28f3994b44543b602e5bf2d87
SSDEEP 96:XbeBWY8lNW5lleAWbgjaJvbdI8cH4YJDcbNVOz8RpFxrPOPXCr3c7isLtKMHAUYu:ZY8zWUAOgjSjR+JdzwFxrhfMHDn
TLSH
T1A822A712B3E8A15AF5FB6731AD72113107B7BA594A76CE3F148D010F0B37A546BA0B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb

VMProtect 3.9.6/VMProtect/Licensing/VB6/Form1.frm

SHA256 72f3f0834bdf15fa5e97dcc98ec01ae4faf841a5c964a187f4090b7e72bf14f7
MD5 e3b94384f7b63da383df7cb62879155f
SHA1 2b3f4bf73d16579704a704fb78a6f924db8c7640
SHA512 4f4b3b2a53f43c9648454a36a33f70e4efd9248286be6c573e7b1ca6a7eac7dfa7e0b256bde7218578655f6b4d2bbf321848850501f262babac0ac0eb40a00d9
SSDEEP 96:tL9PHf4gQH/DH/b/H/X6H/BH/6H/PH/kH/bYEQgENtUwngPb0IsV8KqoZQD1vGXh:h94gG/D/bP/XI/x/I/f/K/Z/itUwngPq
TLSH
T13EC1F086AA85A934CC7781189C1A14C9EC847A679A474C35B58DC5CD1FF3537B2BC3C1
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/VB6/TestApp.exe

IMPHASH fd2e4b5aec9d700a0a84f5b1386417ac
SHA256 8ddee2b12d40154c0c6fd7861f5c1ce17405d5d045a8ed9f8151d5621ea5be1d
MD5 a4211d6b512848e881fd2643491a5865
SHA1 fcbbdd16386ad581e87eb3f8c720fef99ad9639d
SHA512 29c1e5f1708ee83af251d7e22b4ba74e96e5eba0f35039593712f41b311df2f58a216bb70c1b7260f5cd123a2f353b13221a375de687d4afa929008325a130a9
SSDEEP 384:Ny0hUf1/rLlaHXgb22KMSI+31IRcd/vIp/vI1qLgMpIhCihBl63TBw2DJQ5Wud:NyU6pU3sn/QqLgDnhiBNJc
TLSH
T157E28312D88D5822F65285710A27ABAA4F073D316451DE4FBB89738C2D75F835BF834B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4756

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect 3.9.6/VMProtect/Licensing/VB6/TestApp.exe.vmp

SHA256 c97d7581ea84c053a60e1c7b09f652659f51617b0a58f78725a8ee5864f37644
MD5 605d00311ba1bebd14d774cf2abb05ac
SHA1 22144a7450a170adaa9b04835e25b12cc89b7b4a
SHA512 9c052929839eefccef5cdbb446ecd42da84919c4d0a0f61d60abeda6e73edf8929e218cc427ea6dbb96f32c63522a9287c45d9f8bdceb0a8c2435b29d12c7c83
TLSH
T109411954B8F41C26276F11967D478DAFAA40836D862DB64C30BC63873BBCD370D8B448
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/VB6/TestApp.vbp

SHA256 7c175262f356ed4ff74b802dac6a39c8d7b6a8513f28ff1add363cb75df8274f
MD5 3accdff793806204ff920a8e864ea12b
SHA1 bc01f168a5876cc56eabddbdc7f162583d43177f
SHA512 b8d93cfe65cf3842c3c1242ed693ea03d0aeb0b4235f59b51793ec9afb637555b6427411f30f9d7bd4c839c31bc4ab078500b7602267d3d1154a717720830a5f
TLSH
T14D012D85B210207AE570303258F9BD523EC6BB7801C4026C82EC4CD08ECAC33B3623FA
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/VB6/TestApp.vbw

SHA256 d696bd96ac86ddb3c7fc797cd6281e1372684e18a9c5efc632f480e961ff29ae
MD5 fa8b8c8a0e9b5a0fd46efa4b69e381c6
SHA1 630f94eb8e8007f3b2c9483c533df100f22ca60f
SHA512 246307499a1373ea736f0472b5e4c00fdd5630073b50ee0620d2347e07617a7898140051d80301562b053bce093f2cbda523985396a898754535890efbb06c24
TLSH
T127B0129A024F14170B026B43414348058C84B05C002C44804B992093011164348C4282
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/VB6/VMProtectSDK.bas

SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
MD5 30d0ac58f09ba02d81dde6ea9067b582
SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
TLSH
T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/VB6/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect 3.9.6/VMProtect/Licensing/Xcode/AppDelegate.h

SHA256 c3ded7a53d22e7f856ca953a2c6c4a6d20e92b0ca9818266e0eac6332fe90b28
MD5 db05fe095b3cd92c813c1b446eca335b
SHA1 79e356204363c409fe8b2fcbbb8c9cf0430b8e70
SHA512 7769c22c8eec8f7f46e5eca277f49aff3d12c334fae358c03ab9a4f7cd3adbbe59f3168c212052e6fe258952490512957713331ce1db8d168bd4a41ea01c3bc0
TLSH
T104D05B8CFF49D43756D0014571212651F64A20042DE191CB37D55E53EC59077C69D776
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/AppDelegate.mm

SHA256 276ac62ea36d5cc429c661dacf45ad7992338876884b1b0e05e6e98b3bf2ecab
MD5 1be8bd9ff451f5a427eb128c96945422
SHA1 66b9f4b936a62d06350e2f1bf6c357205ce5cfcf
SHA512 24aeb0df3df0106238b1d091c8c8c172cc8fb3225cb6a6dee01310d79b518625fb38625504ef95c012a3c9a3f70be599a3e4fb3cda28c24eef882cdc69a4fc66
TLSH
T1D05154DF3422609EABE222D2927A549C2DF5B12057B390F5B8D60258305610DB2BC3EB
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app.vmp

SHA256 74e8fba8ae5af3fdf0d362a004b0ef0a67244713c46418984fce974a840d2083
MD5 7f0d84edd3328d30fc22f13dbaaff0a3
SHA1 bf1879ff48f27f953f3b33bc798dd04f5489c7df
SHA512 76bf5f495a6c42bf0ebff2421771e28a3eb8c49b7333e63136389f7c8ec6a5049acc82bd1e4d8aa90f3fa5c42673a944d809b1ebeefddfc6413e1588419c83b6
TLSH
T1CD41E81498F4182617FF10853D4ACA5FEF4482978329AB45307CA2833FBD836898B952
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Info.plist

SHA256 de8ee1845f67374ca43aa5c4ec249c24697a78d1f9a84d5e2ffb29d9a0f2c7b7
MD5 7811d5855a341ae7592a2c57a1fdcd2d
SHA1 8b7ab963bee7e0004a272e302a15e10d1069a7ab
SHA512 e27e969d865655e0e6c5379c42a08abc4a2cf38bdbed7e84661e2b230eb421ba1bbdf0a958931c0162abf8cc9be720abe0fbf0b68c25ea75bfa84d9f8935d82c
TLSH
T10E3148B5023036092D8112E692F3D16E119861CC5E7741FEFCCEA53F2A1EE27B271A57
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/VMProtect Licensing Test

SHA256 de496be3920cc394099a2ec00a8aa195a1f016345cd0c48020fdaea2e2630a65
MD5 e6ce50492c6c59c7087df14cd8ffeae4
SHA1 6b85338bc2df31a08c01d961223fc0b175e5a0d3
SHA512 a49e405b8c8bef85dfa4fb4693b68b13666c000d251cfd28c3ff19e13e8a780741c8168b6e9b1ca62f7a7a591d087855037775b741d91b8d6fb6cf3b56bfd1a8
SSDEEP 768:iKBGMP6z8LPl/PRpWJ4WYlFxs9ugC5ljgZ+NGsIXIAIdIQCxr7pdOVWHSZr:itM6z0NRjWo2VC5ljgxSsr7p4VWSr
TLSH
T1BF532957FF20854BC98B4075C81E8B1CE139F768CF91B39B26A8DA884FB46535F0664B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64

VMProtect 3.9.6/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect 3.9.6/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/PkgInfo

SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
MD5 23b7d7d024abb0f558420e098800bf27
SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
MD5 SHA1 SHA512

VMProtect 3.9.6/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Resources/en.lproj/Credits.rtf

SHA256 00be0708f1551e4184d1b6c7bb54a81dd4b3236bfe8d4ba13e49ac9221787ac4
MD5 dc6c5c1a1cbee6b94374aa5287f7e79e
SHA1 7fb83ff236d4480da52c36cd609e96ae03c98164
SHA512 71ca4e5e18652b3f1b41899fdfd6a1740894aeda493ab0c3f05bc1a2f9bfdf884d071f6b6f156ad75bb703ceacc21d0b0ae88a93d32e08b2b1ebb185f7341127
TLSH
T174C04CADE44100904AC5A66EB9DA833E6AD0A6857687CD96155408507A4191B22D6C54
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Resources/en.lproj/InfoPlist.strings

SHA256 e27cacbf4f9358e9ad2056696e8c4cc4ebffd80d3030eb2c2fa94e6d57dca0f2
MD5 9c0f6778c773aa003952bd20169da983
SHA1 3926f2aefccded9ae9704abc34186df88d46c792
SHA512 6a5c273621720e2a94bffa822a6d934662f58e9f5dfc8ea0ea5508a730488a1cd8a995c03401931b0165d09be1b9c8b89ab001df4a33ba48ac811f7ae072afee
TLSH
T1CAB0120262F83800F0F20F2428B950705EB83C001C7423CD2350501904E0D00C270773
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Resources/en.lproj/MainMenu.nib

SHA256 a32bea9a2589b1ce954648483c988c51ee9c800b2545be3e287c17d3632a2ccf
MD5 5c566237adc014fc323ab444db719b86
SHA1 6c6b47a66d87dc99ad259b531e211bfa1b93a1a1
SHA512 b7e77832123532ce81d03b68fa62141216a34ba19fec2157cc0be24044ca1c388af3914ce478abed9b7c20f6bc90f9a54eeeaf3e7c5842ed88bfb0ecce5e6f4a
SSDEEP 768:0VcaegAbT3W7iDOJMuptuoDQL+JreOrPXOGgwl2+MLP9sWNSJwfAh:LaegAbq7UG7GsWSCA
TLSH
T121D208223E879512C7DB1E2E21EB5B19C5C23746E8768732485B63C0A0D652D76CA3FE
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/VMProtect Licensing Test-Info.plist

SHA256 536668bca1fb24cab8af74116ea753b041aacd1f61851da5ea853805f93d814d
MD5 1182fba48ed55b87ad6a2210ecc449c7
SHA1 7b36b6c82e31358e9e8dcad3199d3d507b9c0013
SHA512 4996fe8569475ddf1d169795bd78af220a46f30c63b496f753e9e5406494c5bcbccbf426da54d289a1ae5cedcafafda2d8a05e846d938fbbc10dff3174bb36f4
TLSH
T1722126B1026175581E8213FB92F3C15A019862CC9E7701FAFCCEA63B200E9277370A56
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/VMProtect Licensing Test-Prefix.pch

SHA256 3a48c1828d8385003447c835daf8fc0361692cf8eda1e2bf71a3e8d9c3cfc71f
MD5 06819dddfacfaedabdb8c2e23e8c5173
SHA1 e790354dc9d678409b02d91ad51e889bd9b04eb8
SHA512 f5167c38f407539f67e801c28c904193d2d0f60b4d798589c8171ebb5b3ecc2aa290fa466b13c67d6cbad852f9b1a38cdaf53a71576863119ca7de29088c9ee8
TLSH
T162C0221CE40073A792C004809B0CDFE3730E62208BE3A62BD049D0202621D3C0052CF7
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.pbxproj

SHA256 58817ac0792b3f5d4d26d4e96011314e044a346a9b6628b843bbfe8e52d56b66
MD5 85d56c5bb24e3555d27e802246f201d9
SHA1 86ca7b047b2383874d77bca68dc5ac46b9564abe
SHA512 58fea88716d89eb273273f7278983ae40c9f6b0aa65687b9e68aa75d0b2b570f0170e9d86648a4c1500829a9744e2e9a14b6f6e6ce2e541672e97894d04a6000
SSDEEP 192:wp3QqqpibxuNJklr6WsRPJRnqisLCw8ALCw2G606Hi3iF:cmbx0CwRCwv606j
TLSH
T14A62216B750C3227C2B41372F635CEA0F21DC23A59D864ECD4869C8525A885EC7FDEDA
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.xcworkspace/contents.xcworkspacedata

SHA256 0a034b7b5a28b255efdb6688f11126c60536dd53336256c942cfa80a97a1124b
MD5 b7a43fcb7e02669fa920eaa1f473509d
SHA1 599d5b1238ac238e607ff1d925a8645c9038c014
SHA512 fce72d971e38637e49f41b40a6050a31999d04f2b1a8838385a9c160fa92522ebe9ec5e890810bb7292d3b44ef279ac5913bd879aef1d807f812966a4e9ca4b5
TLSH
T1D3C012B951907A2719B18E514B16CC54F378614E20A44405759B8A932F2161CC3939D4
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/VMProtectLicense.ini

SHA256 5ea757aa7e8df875c9dd7ebfdeff50b8086ad1d0f71c0e6f6aee48980d5f2bfa
MD5 5f5200b0dd7009a0ef12ec5105e594dc
SHA1 ee25ab7071919120740c7bae4d17db559304445c
SHA512 50583dd18b0d3a4ddbfcbc6ed26cc968b0a455dbe44551fefe9a564210c06af37777a04db0b7065076f562f29877303e881f578a366eb4089b666864b2cd6bc8
TLSH
T1D5C02B40662020C4000231242E344C03B452C0354DC440F614845F8042F3C017BAC044
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/VMProtectSDK.h

SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
MD5 e8c78f60aaad4671110eba8991fe94ef
SHA1 dce765aa7929102ad95dfac47325c67bc668c409
SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
TLSH
T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/en.lproj/Credits.rtf

SHA256 00be0708f1551e4184d1b6c7bb54a81dd4b3236bfe8d4ba13e49ac9221787ac4
MD5 dc6c5c1a1cbee6b94374aa5287f7e79e
SHA1 7fb83ff236d4480da52c36cd609e96ae03c98164
SHA512 71ca4e5e18652b3f1b41899fdfd6a1740894aeda493ab0c3f05bc1a2f9bfdf884d071f6b6f156ad75bb703ceacc21d0b0ae88a93d32e08b2b1ebb185f7341127
TLSH
T174C04CADE44100904AC5A66EB9DA833E6AD0A6857687CD96155408507A4191B22D6C54
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/en.lproj/InfoPlist.strings

SHA256 2a7f77dd390052d5407e2b494b173a9fc6b671ab757d25b79ed23352361dce5c
MD5 3e5337e7aae41797043107c0a05980c7
SHA1 c3b87f4a1d0b7a81c08b54aa19dfcd34db210ae2
SHA512 23ca07123e45876869ea50dd5b22104d2934a6ad4dfeb3064c2e604536dd0df2c29076b70c1f475f015981654eb81d70c10a96cf678a4cc6913fd48eff8f20d5
MD5 SHA1 SHA512

VMProtect 3.9.6/VMProtect/Licensing/Xcode/en.lproj/MainMenu.xib

SHA256 20d53d1fd2101506e230c99e8f45719881690a154da817af6da1b73357245026
MD5 7d858d777b2204b2ab0bb11f7cccbaa0
SHA1 61a1cfb9b8350edaebca6297eb294234f5fd7e02
SHA512 bed6c8f7436ea0e96b2fa0e8fa612643c9ef9582e3ff7f10c198d88dc79a69196fad3abceaf426bdbc9d0bdea22082e5b9a70509744bba22cba3cfd2fff4125a
SSDEEP 384:i3qyt8EXSMFUVXLz21h2V0TSqwZ1PcAzk16ITNu+UJcDobguMpo0NSPaH86cT0NM:ifLM11LAywQXUZSz4psX
TLSH
T1CEF3390336CEB4990773145F8BB15E09705FCC7D82A86663B0F1D57BEE59EB1882226B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect 3.9.6/VMProtect/Licensing/Xcode/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect 3.9.6/VMProtect/Licensing/Xcode/main.m

SHA256 1ed2881b24fce2892811bda260f5b4152fa2a723a83da149359270d61eb28263
MD5 85a111c49304b0a60035426a215ee237
SHA1 dbe6051ac6caa64a55e0a485ed5a2fa42d47d87f
SHA512 67b9479faa39e11ac68791e1e6338c4f0da34f75cc1e77064cdd76164ea473f332a76bd3cdbaf722811c19e9e4b8e8c9a2f02e010a9e11b6f5fb2368e915804b
TLSH
T188D02B9510E558778BE2A267A8438F02F2117502E6BB78532585D0076DA2C9520A440B
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Scripts/Delphi Resources/Project1.exe

IMPHASH 1e7575186edecf060e4585f8bc74203f
SHA256 a14c1e75ce36821ecd80e4525c888c9d58e80a23a8a5f6ebe9923f6a33d93e7d
MD5 fcdd67939f856f8bcfc404bb5f706ec7
SHA1 758d14e6d838e12d2c1e52f65594a91dbe744f4b
SHA512 18be594c08513e005840d9af00174edb021fda635e5331528310f72fcfce20938edef99965ccf0039ec0283500239642bb6ff6809ef797c79f6c4c5ba1a6aff2
SSDEEP 24576:FiRfWQHP2VPwHgzDe/EMdwBmSPk96vBL/5YSnrnS:AWHPISVZ9YSrnS
TLSH
T151156C13B392173FC136163AC96792A05C3B7A102E965856DFF4CD8C1FF92A12C3AA57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

769096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW RegCloseKey

user32

LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetClassLongW SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CreateAcceleratorTableW CopyIcon CloseClipboard ClientToScreen CheckMenuItem CharUpperBuffW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrcpyW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc TryEnterCriticalSection SwitchToThread SuspendThread SizeofResource SignalObjectAndWait SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile RaiseException IsDebuggerPresent MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryW LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTickCount GetThreadPriority GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateThread CreateFileW CreateEventW CompareStringW CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW Chord BitBlt Arc AbortDoc

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CoCreateInstance IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

vmprotectsdk32

VMProtectDecryptStringA VMProtectEnd VMProtectBegin

Name

.text

Size

741KB

Virtual Size

741KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect 3.9.6/VMProtect/Scripts/Delphi Resources/Project1.exe.vmp

SHA256 52fc0fc9ca0e0656d4e42679ca3000a5355c93263feec7ed42728e4fbf3841b6
MD5 ff49b44e7a2bb91461047c90a71ec505
SHA1 f749fdfd1169cde78cd5404269f0f0e5f6b9da80
SHA512 92415bf4671340f1fb5c218636051f5e7163fa8e710cd56d7eb4a038b0a0276a447819d444c52730ad2dddc6e22545126ce55c517d7fe4877355034f2b058ee1
TLSH
T1B5112118B599394046B210E478B5D984FE26C2C303780A41F0ED51275FB199DC9E7EB3
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Scripts/Environment Variables/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect 3.9.6/VMProtect/Scripts/Environment Variables/Project1.exe.vmp

SHA256 4ccaf3279c3877e892d92e4bb445fc0aea379813c941a6b2d33a84272ce76eee
MD5 ab4f04736edde15220a7068debe5771d
SHA1 f89c7aa258820f2ddccacb5db73671d814b66bab
SHA512 bc926d4d30d51d45411d7e93669cadbd10d0c5448362ea93e125fc2853124728bb8fb100e9f26c0efadf3d9123eb6cd288d7a8543db91852f622b1edceadf5e4
TLSH
T1C2014E0C56D4B90103FB50D43695D98EFEA183D3036A0A8172ECD79B0F7F5548AC7663
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Scripts/External DLL/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect 3.9.6/VMProtect/Scripts/External DLL/Project1.exe.vmp

SHA256 a7d574bfbc558160aeaa163b0614e6ff4999a822ecb1a0aa640e8dafa6518686
MD5 488094cdaf3c671a77e2516c8368db20
SHA1 fe88d96cf6bbb0dd522cef1166215d1cc1f15a35
SHA512 dc51aa6bdda1b327f2bbd69cd7f00cf91bf0b34afae88fa56284e6a647a3d95d3cda80abeca099065f454ad442364727dafeb8a062fa1826081ee58b28b990eb
TLSH
T15511BD08E1542D4806F361D03ED6B959ECB44183423B0642B5AD51970F364A5C7A76BB
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Scripts/Random Section Names/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect 3.9.6/VMProtect/Scripts/Random Section Names/Project1.exe.vmp

SHA256 85aed524596107b858af4f62456198cbf8342a02ed472721f7f0f1566f04adf5
MD5 d31e21a051463f08091283c4f974adb2
SHA1 5e8f033ed0b178884dbc08fe8a375ab909f95e8f
SHA512 bf3b45a115506509d0f2f5d952e5903bd39ad181dd100f9ec78e8d490fb5e1929bd01f950c1a9b9c65f366e43a72ded3ed0e2d67f9ef2fcb813815f54d0196bd
TLSH
T13611AF18B68165011AF350A021F68989FDB19293033E0A40B0DC625B9F36DAD5AE79FB
MD5 SHA1 SHA512 TLSH

VMProtect 3.9.6/VMProtect/Scripts/Script Events/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect 3.9.6/VMProtect/Scripts/Script Events/Project1.exe.vmp

SHA256 c417b7afe50d6b6f10260fca070be34bf32003aef75b49e9aa3e480ab135b1d3
MD5 42bee32b7a94c7b96259f778cc9c4230
SHA1 a90ae01091f822ef7503894fed4d02446c096512
SHA512 453b881ccb82cb0aa3dacf1db892a96aa1029288ef2ad39497db38763822858bc840996c72a3035b45f4379a84f4c3f9ee99e3012436941f5ead6e382792647d
TLSH
T1B8019C0CA15D6A4003F702956BA78D86ECF182D303760781B99C969B1F328948F936FB
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer