VMProtect Lite v3.10.4 Build 2668.zip
- SHA256 ca70a7da1fb07c687a428696587cea77c6b623a709c8ab2364aa8b3e816124f7
Password
arhajrhakerhekrwerj2453
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
VMProtect Lite v3.10.4 Build 2668.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target VMProtect Lite v3.10.4 Build 2668.zip
- Size 36.9MB
- Sample260821-vp3klax1ht
- SHA256 ca70a7da1fb07c687a428696587cea77c6b623a709c8ab2364aa8b3e816124f7
- MD5 98188a40e9f98bfb8dcc7c2975c76f34
- SHA1 33a977625228aa89131b3e60a9175ed4c3c11fae
- SHA512 fda108f6677fc99f98018b5d8dbb874ab10620e228a440f4c3e1ec9f44d2e410b4acdfcef32c7162b87b08b271a45393e80f90fcd7cf4a054e261c8b0c91712e
- SSDEEP 786432:HlFHW7mrv1OJX1iY/oJkAnFHIR3h3deb7jDXSU9RFLAzINsNBChCvporBi:FFHE2dOJX1zAJkeFHMjcjLRFLqzChYoI
- TLSH T1EB873380FA47814BFE92667C2500FB456F1BB64C2BFDD4A36E092BC299E57BC800559F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/VMProtect.exe - Unsigned PE 44 IoCs
Checks for missing Authenticode signature.
resource unpack001/Lib/Net/VMProtect.SDK.dll unpack001/Lib/Windows/VMProtectDDK32.sys unpack001/Lib/Windows/VMProtectDDK64.sys unpack001/Lib/Windows/VMProtectSDK32.dll unpack001/Lib/Windows/VMProtectSDK64.dll unpack001/VMProtect/Code Markers/BCB/Project1.exe unpack001/VMProtect/Code Markers/BCB/VMProtectSDK32.dll unpack001/VMProtect/Code Markers/Delphi/Project1.exe unpack001/VMProtect/Code Markers/Delphi/VMProtectSDK32.dll unpack001/VMProtect/Code Markers/Free Pascal/Project1.exe unpack001/VMProtect/Code Markers/Free Pascal/VMProtectSDK32.dll unpack001/VMProtect/Code Markers/Lazarus/VMProtectSDK32.dll unpack001/VMProtect/Code Markers/Lazarus/project1.exe unpack001/VMProtect/Code Markers/MASM/Project1.exe unpack001/VMProtect/Code Markers/MASM/VMProtectSDK32.dll unpack001/VMProtect/Code Markers/MASM/VMProtectSDK64.dll unpack001/VMProtect/Code Markers/MSVC/bin/Project1.exe unpack001/VMProtect/Code Markers/MSVC/bin/VMProtectSDK32.dll unpack001/VMProtect/Code Markers/MSVC/bin/VMProtectSDK64.dll unpack001/VMProtect/Code Markers/MinGW/Project1.exe unpack001/VMProtect/Code Markers/MinGW/VMProtectSDK32.dll unpack001/VMProtect/Code Markers/Net/bin/Project1.exe unpack001/VMProtect/Code Markers/Net/bin/VMProtect.SDK.dll unpack001/VMProtect/Code Markers/VB6/Project1.exe unpack001/VMProtect/Code Markers/VB6/VMProtectSDK32.dll unpack001/VMProtect/KeyGen/DLL/Lib/KeyGen32.dll unpack001/VMProtect/KeyGen/DLL/Lib/KeyGen64.dll unpack001/VMProtect/Licensing/BCB/TestApp.exe unpack001/VMProtect/Licensing/DDK/bin/i386/TestApp.sys unpack001/VMProtect/Licensing/Delphi/TestApp.exe unpack001/VMProtect/Licensing/Delphi/VMProtectSDK32.dll unpack001/VMProtect/Licensing/MSVC/TestApp.exe unpack001/VMProtect/Licensing/MSVC/bin/TestApp.exe unpack001/VMProtect/Licensing/MSVC/bin/VMProtectSDK32.dll unpack001/VMProtect/Licensing/MSVC/bin/VMProtectSDK64.dll unpack001/VMProtect/Licensing/Net/bin/TestApp.exe unpack001/VMProtect/Licensing/Net/bin/VMProtect.SDK.dll unpack001/VMProtect/Licensing/VB6/TestApp.exe unpack001/VMProtect/Licensing/VB6/VMProtectSDK32.dll unpack001/VMProtect/Scripts/Delphi Resources/Project1.exe unpack001/VMProtect/Scripts/Environment Variables/Project1.exe unpack001/VMProtect/Scripts/External DLL/Project1.exe unpack001/VMProtect/Scripts/Random Section Names/Project1.exe unpack001/VMProtect/Scripts/Script Events/Project1.exe
File Explorer
-
VMProtect Lite v3.10.4 Build 2668.zip.zip 36.9MB
-
Help/.en/_23.cfs97KB
-
Help/.en/deletable4B
-
Help/.en/segments28B
-
Help/.ru/_23.cfs148KB
-
Help/.ru/deletable4B
-
Help/.ru/segments28B
-
Help/en.qch1.5MB
-
Help/en.qhc8KB
-
Help/ru.qch1.6MB
-
Help/ru.qhc8KB
-
Include/ASM/VMProtectSDK.inc2KB
-
Include/C/VMProtectDDK.h3KB
-
Include/C/VMProtectSDK.h3KB
-
Include/Go/VMProtectSDK.h3KB
-
Include/Go/vmprotect.go2KB
-
Include/Pascal/VMProtectSDK.pas9KB
-
Include/VB6/VMProtectSDK.bas3KB
-
Langs/de.lng10KB
-
Langs/en.lng10KB
-
Langs/fr.lng11KB
-
Langs/ru.lng21KB
-
Langs/zh.lng12KB
-
Lib/Linux/libVMProtectARM64.so.elf 38KB
-
Lib/Linux/libVMProtectSDK32.so.elf 32KB
-
Lib/Linux/libVMProtectSDK64.so.elf 38KB
-
Lib/Net/VMProtect.SDK.dll.dll 10KB
-
Lib/OSX/libVMProtectSDK.dylib.dylib 118KB
-
Lib/Windows/BCC64ELF/VMProtectSDK64.lib2KB
-
Lib/Windows/MinGW/VMProtectSDK32.a18KB
-
Lib/Windows/MinGW/VMProtectSDK64.a18KB
-
Lib/Windows/OMF/VMProtectSDK32.lib3KB
-
Lib/Windows/VMProtectARM64.dll113KB
-
Lib/Windows/VMProtectARM64.lib7KB
-
Lib/Windows/VMProtectDDK32.lib7KB
-
Lib/Windows/VMProtectDDK32.sys.dll 3KB
-
Lib/Windows/VMProtectDDK64.lib7KB
-
Lib/Windows/VMProtectDDK64.sys.dll 4KB
-
Lib/Windows/VMProtectSDK32.dll.dll 98KB
-
Lib/Windows/VMProtectSDK32.lib7KB
-
Lib/Windows/VMProtectSDK64.dll.dll 115KB
-
Lib/Windows/VMProtectSDK64.lib7KB
-
VMProtect.exe.exe 31.6MB
-
VMProtect/Code Markers/BCB/Project1.bpr.xml 3KB
-
VMProtect/Code Markers/BCB/Project1.cpp.js 1KB
-
VMProtect/Code Markers/BCB/Project1.exe.exe 220KB
-
VMProtect/Code Markers/BCB/Project1.exe.vmp.xml 804B
-
VMProtect/Code Markers/BCB/Project1.res876B
-
VMProtect/Code Markers/BCB/Unit1.cpp1KB
-
VMProtect/Code Markers/BCB/Unit1.dfm884B
-
VMProtect/Code Markers/BCB/Unit1.h880B
-
VMProtect/Code Markers/BCB/VMProtectSDK.h3KB
-
VMProtect/Code Markers/BCB/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Code Markers/BCB/VMProtectSDK32.lib7KB
-
VMProtect/Code Markers/Delphi/Project1.dof19B
-
VMProtect/Code Markers/Delphi/Project1.dpr188B
-
VMProtect/Code Markers/Delphi/Project1.exe.exe 887KB
-
VMProtect/Code Markers/Delphi/Project1.exe.vmp.xml 804B
-
VMProtect/Code Markers/Delphi/Project1.res876B
-
VMProtect/Code Markers/Delphi/Unit1.dfm871B
-
VMProtect/Code Markers/Delphi/Unit1.pas817B
-
VMProtect/Code Markers/Delphi/VMProtectSDK.pas9KB
-
VMProtect/Code Markers/Delphi/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Code Markers/Free Pascal/Project1.macho 355KB
-
VMProtect/Code Markers/Free Pascal/Project1.exe.exe 77KB
-
VMProtect/Code Markers/Free Pascal/Project1.pas1KB
-
VMProtect/Code Markers/Free Pascal/Resource.rc328B
-
VMProtect/Code Markers/Free Pascal/Resource.res300B
-
VMProtect/Code Markers/Free Pascal/VMProtectSDK.pas9KB
-
VMProtect/Code Markers/Free Pascal/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Code Markers/Free Pascal/libVMProtectSDK.dylib.dylib 49KB
-
VMProtect/Code Markers/Free Pascal/makeit.bat104B
-
VMProtect/Code Markers/Free Pascal/makeit.sh.sh 70B
-
VMProtect/Code Markers/GCC/Project1.macho 8KB
-
VMProtect/Code Markers/GCC/Project1.cpp440B
-
VMProtect/Code Markers/GCC/VMProtectSDK.h3KB
-
VMProtect/Code Markers/GCC/libVMProtectSDK.dylib.dylib 49KB
-
VMProtect/Code Markers/GCC/makeit.sh.sh .vbs 419B
-
VMProtect/Code Markers/Lazarus/VMProtectSDK.pas9KB
-
VMProtect/Code Markers/Lazarus/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Code Markers/Lazarus/libVMProtectSDK.dylib.dylib 49KB
-
VMProtect/Code Markers/Lazarus/project1.macho 4.1MB
-
VMProtect/Code Markers/Lazarus/project1.app/Contents/Info.plist.xml 1KB
-
VMProtect/Code Markers/Lazarus/project1.app/Contents/MacOS/project11KB
-
VMProtect/Code Markers/Lazarus/project1.app/Contents/PkgInfo10B
-
VMProtect/Code Markers/Lazarus/project1.exe.exe 1.6MB
-
VMProtect/Code Markers/Lazarus/project1.exe.vmp.xml 804B
-
VMProtect/Code Markers/Lazarus/project1.lpi.xml 3KB
-
VMProtect/Code Markers/Lazarus/project1.lpr320B
-
VMProtect/Code Markers/Lazarus/unit1.lfm850B
-
VMProtect/Code Markers/Lazarus/unit1.lrs990B
-
VMProtect/Code Markers/Lazarus/unit1.pas898B
-
VMProtect/Code Markers/MASM/Project1.asm2KB
-
VMProtect/Code Markers/MASM/Project1.exe.exe 3KB
-
VMProtect/Code Markers/MASM/Project1.exe.vmp.xml 804B
-
VMProtect/Code Markers/MASM/Project1.inc6KB
-
VMProtect/Code Markers/MASM/VMProtectSDK.inc2KB
-
VMProtect/Code Markers/MASM/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Code Markers/MASM/VMProtectSDK32.lib7KB
-
VMProtect/Code Markers/MASM/VMProtectSDK64.dll.dll 116KB
-
VMProtect/Code Markers/MASM/VMProtectSDK64.lib7KB
-
VMProtect/Code Markers/MASM/makeit.bat1KB
-
VMProtect/Code Markers/MSVC/Project1.cpp1KB
-
VMProtect/Code Markers/MSVC/Project1.sln882B
-
VMProtect/Code Markers/MSVC/Project1.vcxproj7KB
-
VMProtect/Code Markers/MSVC/Project1.vcxproj.filters1KB
-
VMProtect/Code Markers/MSVC/Resource.rc1KB
-
VMProtect/Code Markers/MSVC/StdAfx.cpp295B
-
VMProtect/Code Markers/MSVC/StdAfx.h773B
-
VMProtect/Code Markers/MSVC/VMProtectSDK.h3KB
-
VMProtect/Code Markers/MSVC/VMProtectSDK32.lib7KB
-
VMProtect/Code Markers/MSVC/VMProtectSDK64.lib7KB
-
VMProtect/Code Markers/MSVC/bin/Project1.exe.exe 35KB
-
VMProtect/Code Markers/MSVC/bin/Project1.exe.vmp.xml 804B
-
VMProtect/Code Markers/MSVC/bin/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Code Markers/MSVC/bin/VMProtectSDK64.dll.dll 116KB
-
VMProtect/Code Markers/MSVC/resource.h548B
-
VMProtect/Code Markers/MinGW/Project1.cpp1KB
-
VMProtect/Code Markers/MinGW/Project1.dev1KB
-
VMProtect/Code Markers/MinGW/Project1.exe.exe 20KB
-
VMProtect/Code Markers/MinGW/Project1.exe.vmp.xml 804B
-
VMProtect/Code Markers/MinGW/Project1_private.h581B
-
VMProtect/Code Markers/MinGW/Project1_private.rc96B
-
VMProtect/Code Markers/MinGW/Resource.rc1KB
-
VMProtect/Code Markers/MinGW/VMProtectSDK.h3KB
-
VMProtect/Code Markers/MinGW/VMProtectSDK32.a18KB
-
VMProtect/Code Markers/MinGW/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Code Markers/MinGW/makeit.bat154B
-
VMProtect/Code Markers/MinGW/resource.h159B
-
VMProtect/Code Markers/Net/App.config.xml 167B
-
VMProtect/Code Markers/Net/Form1.Designer.cs2KB
-
VMProtect/Code Markers/Net/Form1.cs916B
-
VMProtect/Code Markers/Net/Form1.resx.vbs 5KB
-
VMProtect/Code Markers/Net/Program.cs367B
-
VMProtect/Code Markers/Net/Project1.csproj4KB
-
VMProtect/Code Markers/Net/Properties/AssemblyInfo.cs937B
-
VMProtect/Code Markers/Net/bin/Project1.exe.exe 7KB
-
VMProtect/Code Markers/Net/bin/VMProtect.SDK.dll.dll 10KB
-
VMProtect/Code Markers/VB6/Form1.frm.vbs 1KB
-
VMProtect/Code Markers/VB6/Project1.exe.exe 20KB
-
VMProtect/Code Markers/VB6/Project1.exe.vmp.xml 804B
-
VMProtect/Code Markers/VB6/Project1.vbp710B
-
VMProtect/Code Markers/VB6/Project1.vbw51B
-
VMProtect/Code Markers/VB6/VMProtectSDK.bas3KB
-
VMProtect/Code Markers/VB6/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Code Markers/Xcode/Project1.xcodeproj/project.pbxproj20KB
-
VMProtect/Code Markers/Xcode/Project1.xcodeproj/project.xcworkspace/contents.xcworkspacedata.xml 160B
-
VMProtect/Code Markers/Xcode/Project1/AppDelegate.h382B
-
VMProtect/Code Markers/Xcode/Project1/AppDelegate.m1KB
-
VMProtect/Code Markers/Xcode/Project1/Base.lproj/MainMenu.xib.xml 52KB
-
VMProtect/Code Markers/Xcode/Project1/Images.xcassets/AppIcon.appiconset/Contents.json960B
-
VMProtect/Code Markers/Xcode/Project1/Project1-Info.plist.xml 1KB
-
VMProtect/Code Markers/Xcode/Project1/Project1-Prefix.pch181B
-
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Info.plist.xml 1KB
-
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/Project1.macho 55KB
-
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/libVMProtectSDK.dylib.dylib 49KB
-
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/PkgInfo8B
-
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/Base.lproj/MainMenu.nib31KB
-
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/Credits.rtf.rtf 465B
-
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/InfoPlist.strings96B
-
VMProtect/Code Markers/Xcode/Project1/VMProtectSDK.h3KB
-
VMProtect/Code Markers/Xcode/Project1/en.lproj/Credits.rtf.rtf 465B
-
VMProtect/Code Markers/Xcode/Project1/en.lproj/InfoPlist.strings47B
-
VMProtect/Code Markers/Xcode/Project1/libVMProtectSDK.dylib.dylib 49KB
-
VMProtect/Code Markers/Xcode/Project1/main.m256B
-
VMProtect/Code Markers/Xcode/Project1Tests/Project1Tests-Info.plist.xml 706B
-
VMProtect/Code Markers/Xcode/Project1Tests/Project1Tests.m675B
-
VMProtect/Code Markers/Xcode/Project1Tests/en.lproj/InfoPlist.strings47B
-
VMProtect/KeyGen/DLL/Delphi/KeyGenExample.dpr3KB
-
VMProtect/KeyGen/DLL/Lib/KeyGen32.dll.dll 60KB
-
VMProtect/KeyGen/DLL/Lib/KeyGen32.lib2KB
-
VMProtect/KeyGen/DLL/Lib/KeyGen64.dll.dll 74KB
-
VMProtect/KeyGen/DLL/Lib/KeyGen64.lib2KB
-
VMProtect/KeyGen/DLL/Lib/KeyGenAPI.h1KB
-
VMProtect/KeyGen/DLL/MSVC/KeyGenAPI.h1KB
-
VMProtect/KeyGen/DLL/MSVC/KeyGenExample.cpp1KB
-
VMProtect/KeyGen/DLL/MSVC/KeyGenExample.sln1KB
-
VMProtect/KeyGen/DLL/MSVC/KeyGenExample.vcproj.xml 6KB
-
VMProtect/KeyGen/DLL/MSVC/stdafx.cpp300B
-
VMProtect/KeyGen/DLL/MSVC/stdafx.h240B
-
VMProtect/KeyGen/DLL/MSVC/targetver.h765B
-
VMProtect/KeyGen/DLL/Sources/KeyGen.cpp7KB
-
VMProtect/KeyGen/DLL/Sources/KeyGen.def75B
-
VMProtect/KeyGen/DLL/Sources/KeyGen.rc2KB
-
VMProtect/KeyGen/DLL/Sources/KeyGen.sln1KB
-
VMProtect/KeyGen/DLL/Sources/KeyGen.vcproj.xml 8KB
-
VMProtect/KeyGen/DLL/Sources/KeyGenAPI.h1KB
-
VMProtect/KeyGen/DLL/Sources/b64.cpp4KB
-
VMProtect/KeyGen/DLL/Sources/b64.h251B
-
VMProtect/KeyGen/DLL/Sources/resource.h400B
-
VMProtect/KeyGen/DLL/Sources/sha-1.cpp10KB
-
VMProtect/KeyGen/DLL/Sources/sha-1.h1KB
-
VMProtect/KeyGen/DLL/Sources/sshbn.cpp26KB
-
VMProtect/KeyGen/DLL/Sources/sshbn.h1KB
-
VMProtect/KeyGen/DLL/Sources/stdafx.cpp293B
-
VMProtect/KeyGen/DLL/Sources/stdafx.h328B
-
VMProtect/KeyGen/Net/KeyGen/AlorithmRSA.cs.ps1 869B
-
VMProtect/KeyGen/Net/KeyGen/BigInteger.cs.js 125KB
-
VMProtect/KeyGen/Net/KeyGen/Generator.cs.ps1 8KB
-
VMProtect/KeyGen/Net/KeyGen/KeyGen.csproj2KB
-
VMProtect/KeyGen/Net/KeyGen/Properties/AssemblyInfo.cs1KB
-
VMProtect/KeyGen/Net/KeyGen/app.config.xml 69B
-
VMProtect/KeyGen/Net/KeyGenNet.sln1KB
-
VMProtect/KeyGen/Net/Usage/Program.cs.js 916B
-
VMProtect/KeyGen/Net/Usage/Properties/AssemblyInfo.cs1KB
-
VMProtect/KeyGen/Net/Usage/Usage.csproj2KB
-
VMProtect/KeyGen/Net/Usage/app.config120B
-
VMProtect/KeyGen/PHP/keygen.php7KB
-
VMProtect/Licensing/BCB/TestApp.cbproj13KB
-
VMProtect/Licensing/BCB/TestApp.cpp.js 874B
-
VMProtect/Licensing/BCB/TestApp.exe.exe 114KB
-
VMProtect/Licensing/BCB/TestApp.exe.vmp.xml 2KB
-
VMProtect/Licensing/BCB/TestApp.map45KB
-
VMProtect/Licensing/BCB/TestApp.res1KB
-
VMProtect/Licensing/BCB/Unit1.cpp3KB
-
VMProtect/Licensing/BCB/Unit1.dfm1KB
-
VMProtect/Licensing/BCB/Unit1.h1KB
-
VMProtect/Licensing/DDK/MAKEFILE267B
-
VMProtect/Licensing/DDK/SOURCES138B
-
VMProtect/Licensing/DDK/TestApp.c2KB
-
VMProtect/Licensing/DDK/VMProtectDDK.h3KB
-
VMProtect/Licensing/DDK/VMProtectDDK32.lib7KB
-
VMProtect/Licensing/DDK/VMProtectDDK64.lib7KB
-
VMProtect/Licensing/DDK/bin/i386/TestApp.sys.sys 3KB
-
VMProtect/Licensing/DDK/bin/i386/TestApp.sys.vmp.xml 2KB
-
VMProtect/Licensing/DDK/make.bat.bat .vbs 162B
-
VMProtect/Licensing/Delphi/TestApp.dpr231B
-
VMProtect/Licensing/Delphi/TestApp.dproj4KB
-
VMProtect/Licensing/Delphi/TestApp.exe.exe 841KB
-
VMProtect/Licensing/Delphi/TestApp.exe.vmp.xml 2KB
-
VMProtect/Licensing/Delphi/TestApp.map536KB
-
VMProtect/Licensing/Delphi/Unit1.dfm1KB
-
VMProtect/Licensing/Delphi/Unit1.pas.js 3KB
-
VMProtect/Licensing/Delphi/VMProtectSDK.pas9KB
-
VMProtect/Licensing/Delphi/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Licensing/MSVC/TestApp.cpp3KB
-
VMProtect/Licensing/MSVC/TestApp.exe.exe 782KB
-
VMProtect/Licensing/MSVC/TestApp.rc2KB
-
VMProtect/Licensing/MSVC/TestApp.sln880B
-
VMProtect/Licensing/MSVC/TestApp.vcxproj5KB
-
VMProtect/Licensing/MSVC/TestApp.vcxproj.filters1KB
-
VMProtect/Licensing/MSVC/VMProtectSDK.h3KB
-
VMProtect/Licensing/MSVC/VMProtectSDK32.lib7KB
-
VMProtect/Licensing/MSVC/VMProtectSDK64.lib7KB
-
VMProtect/Licensing/MSVC/bin/TestApp.exe.exe 53KB
-
VMProtect/Licensing/MSVC/bin/TestApp.exe.vmp.xml 2KB
-
VMProtect/Licensing/MSVC/bin/TestApp.map66KB
-
VMProtect/Licensing/MSVC/bin/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Licensing/MSVC/bin/VMProtectSDK64.dll.dll 116KB
-
VMProtect/Licensing/MSVC/resource.h945B
-
VMProtect/Licensing/MSVC/stdafx.cpp65B
-
VMProtect/Licensing/MSVC/stdafx.h1KB
-
VMProtect/Licensing/Net/Form1.Designer.cs6KB
-
VMProtect/Licensing/Net/Form1.cs.js 2KB
-
VMProtect/Licensing/Net/Form1.resx.vbs 5KB
-
VMProtect/Licensing/Net/Program.cs479B
-
VMProtect/Licensing/Net/Properties/AssemblyInfo.cs1KB
-
VMProtect/Licensing/Net/Properties/Resources.Designer.cs.vbs 2KB
-
VMProtect/Licensing/Net/Properties/Resources.resx.vbs 5KB
-
VMProtect/Licensing/Net/Properties/Settings.Designer.cs1KB
-
VMProtect/Licensing/Net/Properties/Settings.settings249B
-
VMProtect/Licensing/Net/TestApp.csproj3KB
-
VMProtect/Licensing/Net/bin/TestApp.exe.exe 11KB
-
VMProtect/Licensing/Net/bin/TestApp.exe.vmp.xml 1KB
-
VMProtect/Licensing/Net/bin/VMProtect.SDK.dll.dll 10KB
-
VMProtect/Licensing/VB6/Form1.frm.vbs 5KB
-
VMProtect/Licensing/VB6/TestApp.exe.exe 32KB
-
VMProtect/Licensing/VB6/TestApp.exe.vmp.xml 2KB
-
VMProtect/Licensing/VB6/TestApp.vbp679B
-
VMProtect/Licensing/VB6/TestApp.vbw87B
-
VMProtect/Licensing/VB6/VMProtectSDK.bas3KB
-
VMProtect/Licensing/VB6/VMProtectSDK32.dll.dll 98KB
-
VMProtect/Licensing/Xcode/AppDelegate.h259B
-
VMProtect/Licensing/Xcode/AppDelegate.mm2KB
-
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app.vmp.xml 2KB
-
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Info.plist.xml 1KB
-
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/VMProtect Licensing Test.macho 60KB
-
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/libVMProtectSDK.dylib.dylib 49KB
-
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/PkgInfo8B
-
VMProtect/Licensing/Xcode/VMProtect Licensing Test-Info.plist.xml 1KB
-
VMProtect/Licensing/Xcode/VMProtect Licensing Test-Prefix.pch183B
-
VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.pbxproj14KB
-
VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.xcworkspace/contents.xcworkspacedata.xml 176B
-
VMProtect/Licensing/Xcode/VMProtectLicense.ini141B
-
VMProtect/Licensing/Xcode/VMProtectSDK.h3KB
-
VMProtect/Licensing/Xcode/en.lproj/Credits.rtf.rtf 137B
-
VMProtect/Licensing/Xcode/en.lproj/InfoPlist.strings47B
-
VMProtect/Licensing/Xcode/en.lproj/MainMenu.xib.xml 156KB
-
VMProtect/Licensing/Xcode/libVMProtectSDK.dylib.dylib 49KB
-
VMProtect/Licensing/Xcode/main.m268B
-
VMProtect/Scripts/Delphi Resources/Project1.exe.exe 887KB
-
VMProtect/Scripts/Delphi Resources/Project1.exe.vmp.xml 1KB
-
VMProtect/Scripts/Environment Variables/Project1.exe.exe 3KB
-
VMProtect/Scripts/Environment Variables/Project1.exe.vmp.xml 758B
-
VMProtect/Scripts/External DLL/Project1.exe.exe 3KB
-
VMProtect/Scripts/External DLL/Project1.exe.vmp.xml 977B
-
VMProtect/Scripts/Random Section Names/Project1.exe.exe 3KB
-
VMProtect/Scripts/Random Section Names/Project1.exe.vmp.xml 1KB
-
VMProtect/Scripts/Script Events/Project1.exe.exe 3KB
-
VMProtect/Scripts/Script Events/Project1.exe.vmp.xml 782B
Help/.en/_23.cfs
- SHA256 fb5438a535701f7251e07c3f3f27ae9babcc60401c8bcd1bc73ccd0c8c5d17dc
- MD5 f1d1795555de9d3d474368dc25188e6c
- SHA1 3eb75e39d66fee747595a5a1ec8a27708d5a15e4
- SHA512 9b73158a968fc5304b114882cc801122c31e652f58295afe2fd476beb1a5eaa27e3acdc57485c1e11cb0c2bd274d57e6709fc944497c06b72bed5983859ab149
- SSDEEP 3072:3eQAt8RDAp+2xQiaickZF0h79Dz7UXKhp:xpRDe1xN0h79DzwXgp
- TLSH T1A3A33A43E03334D3FE45017386679A0A37A1B3876E63B34A6ABD5368DB231C64FA2557
- MD5 SHA1 SHA512 SSDEEP TLSH
Help/.en/deletable
- SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
- MD5 f1d3ff8443297732862df21dc4e57262
- SHA1 9069ca78e7450a285173431b3e52c5c25299e473
- SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
- MD5 SHA1 SHA512
Help/.en/segments
- SHA256 2556818e0166daad36798db31118c575eed8d94821b1b86d68124f52e034e418
- MD5 7f9f3cb4b9d87551c4e9641f6863cb6a
- SHA1 dd8d1f3b3fddf3a110dcd923155ee36a2f48bf0c
- SHA512 f2a5c236e6e083d494ba389c7a455f0b254d1ca147b05f450888b0dcd7fad120071fa23ff8d6d517cdca23b089fc61aaf068d1b367788357383d3a4ffaeedaac
- MD5 SHA1 SHA512
Help/.ru/_23.cfs
- SHA256 f0eeef2b608350db06c14d3c0b5eb42bc98132fd9ce11e47624bc1247aed1420
- MD5 e4576691785b3f9d83f5c84987327262
- SHA1 fe08f128659f9d9a075ef6ca3e8db7026e490496
- SHA512 6e7533f7a8abe8762a06ffd0a66ccf90938736b9b34a53fee023ecc9cce289a287ab87394a90244ef74cb8c004dbd631becf11378beccb2d757ca4e16129b066
- SSDEEP 3072:wS+czGzAP1DETy0wWWEB9bPwmkWQLPYahDYMcpIpJpmev4aQv2yqK:DpzrTuBlQLHuIseVc2m
- TLSH T180E31B32D02BB5CDEC0024A7C8252A053E9663BF7F976366167CFD78B6B35848D39246
- MD5 SHA1 SHA512 SSDEEP TLSH
Help/.ru/deletable
- SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
- MD5 f1d3ff8443297732862df21dc4e57262
- SHA1 9069ca78e7450a285173431b3e52c5c25299e473
- SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
- MD5 SHA1 SHA512
Help/.ru/segments
- SHA256 7912213e2f08c8fb5f93d364ba0d439009f9bb1fc431afa379a0ef0af99a703b
- MD5 cb971d50169c23cd4f1a3160679f5948
- SHA1 91a8cb4655aa499ba8a8c9b4b2c7b330c3ea2bb3
- SHA512 ae9b9e1c7e3fdb16e7a68457b92efb06e2027a5d404e5e9cff90c616ad8d078c9066ca9c44d61ce25af6426201171761ece136da38f13331403c9d75c71c6e1a
- MD5 SHA1 SHA512
Help/en.qch
- SHA256 90e9c80c8466e6132bb3d28d17e0abf29d9e88c9ff986f84a64e0f9bbcee9e83
- MD5 da523c2da049d556f937dcc84d061e0d
- SHA1 a8e7830b4acdc4208ca88d80b2122467b331b6b3
- SHA512 2e76fc241cd0756f10d7b79fc290263143bae8d4725ab2e601553d8a6f9d6537de6c9e64b595c4894fa8e102bb093199b3f740c06a6c1d2587c1aff6b37d4483
- SSDEEP 24576:mpbpXVUXyDT0f6I87HCoot6wzmdqZ4RpFlHP9f7dhBt0zMklqIBHZN3elaWn0gjb:xiMf8HIxmR15hBqzFHH30aWnLGH0B
- TLSH T105752341874BBE1BF78B4634B83A1611DD33363DD122E229611DCA9D6070BA611F9FAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Help/en.qhc
- SHA256 65a16d0730b9420fa5a29ba307d3cc68acf4b5982219ff672cd6654c15ffae75
- MD5 0db44fa8ed3ade67aa2c4716e50921ed
- SHA1 a38f757ca1aa45238445e030640f4c11c2c243c2
- SHA512 397c71bc662cf1e7e24fe01b21b0fc4c2c2955b66c1a51dd19892bc2ea5af126e237fb29d248f99ee54fa15eb1110f1b92333f1b47f8aa623459f2b4f7990354
- SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbgl284IqmmTxXHiedmX/pyLXrmUNmXM:gHn3qUqeRF/u+dd62xIqmmTMeWQmUmM
- TLSH T1D9F1C2D64B1A7536FED2C1B7F41252351D38228E0073C8F568AE63AB08535869A5BCFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Help/ru.qch
- SHA256 c49c4e0105d4753b2ab1af70f9631dcdedf023bc09299076a7d79988a818b627
- MD5 b98c9fcec78dfffe1d3e13cb022f1eb4
- SHA1 eb9fc3d200cf9fc04d0b406a5a806d08743fcc8c
- SHA512 3c1f46b1a9da157a410e81d0b2a1fc5718b56d63c84a9434e0d245e03ddeda0fa0860b0774dfbab41b98f98559ed5f62dbf2a47a1df30d45057f01b0764463de
- SSDEEP 24576:epQp/VZ2kFSDQeohDV/goxG4HjsELPeaUhQqIFabsnFLHfOGbH8LgvzP+sahM4ls:J2aSMeohhHsp1IFaonjbcLAzP+ZOzt7
- TLSH T173753300B30AF422E7CB1A3C55236B76AEBDB53D5596E217325CC8ED60B4B06907C8DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Help/ru.qhc
- SHA256 b386d55fa0acef53870bea201468b8393361f09bd828a242f7bf9d3c19327740
- MD5 aa37fe2a672fc1fca01d291f253ff6da
- SHA1 b5f709c03c17f0c1b48656a685884dde31352f97
- SHA512 d6a8a989eb82917b672350e9b741808fd68ad277802588fa260f16d259d9d8811e084e820d0a26d29e7312bd84258da66ce727c0b866aa820933b273411c9ed7
- SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbn2l284IqmmTxXHiedmXLTyLXrmUNmXM:gHn3qUqeRF/u+ddnQ2xIqmmTMeWOmUmM
- TLSH T133F1E2D647197432FED2C1B7F40252351D38228E0073C8F169AE23AB08535869A5BCFF
- MD5 SHA1 SHA512 SSDEEP TLSH
Include/ASM/VMProtectSDK.inc
- SHA256 9d41f7bf8f220e721e34f54665db9b63caca9ea00fc650f81492736a196f731e
- MD5 a8c48a4a96b59b8bb464223cc5a7c66f
- SHA1 19c91906b42228e7c03c872fc3e2ceca2ed73658
- SHA512 121b00dbc539a9597235e7b44eb7aeb773daaa06e19cf48a44aa0ff935dba2e5cd1de5ac7585696744a9ea06918e775f649fbed32c01fa862d4cb112fe08dffe
- TLSH T1B44112068509768FC0A345B6BAA5AC50BE9BF91113FCCA6B60E50803134752CE7BDF9B
- MD5 SHA1 SHA512 TLSH
Include/C/VMProtectDDK.h
- SHA256 e98615fe5506da30061c63a3c6a3b1dfd23892f783d1aa6a9e4fe891a59f2283
- MD5 28f7681c7317ba191dcc8bf36a6f6455
- SHA1 917c2fadc5e6ce96d52d0a2ca20e5436ec83d90f
- SHA512 6fea13ca6a2c55817ca968cec02df016b9d66f99f1dea71734d9de02170aa1817e7ac69f631810d5af25eccab298e4df89f5a2e59ec9ffda16247615c08bd41f
- TLSH T15561BD410D01306ED192D7F56737DC6225ACF12335F6EDEB220A24151BC354DABAEAAF
- MD5 SHA1 SHA512 TLSH
Include/C/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
Include/Go/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
Include/Go/vmprotect.go
- SHA256 b5bc56cfb0a1a9d14773c688f191a744a8df82571f857bafff3ed534dc9185ee
- MD5 7466ecfb21aa217fdea7bca78eb8dd96
- SHA1 0ee1a95058559da83e015415924f5bb788a3cbd0
- SHA512 561afece7a5ad346046ad23dd477fc72762a0e5e1eadc902d4d656788c1fd30ac004db9da3dfef2ad1e9bcbaa7093a19fbfb1689040e4bd63d9811947335feb8
- TLSH T1B55114422693A10ED1D213552635F9907CC6F12256F7C1ABB1CC42E5B3AA1587B3C67A
- MD5 SHA1 SHA512 TLSH
Include/Pascal/VMProtectSDK.pas
- SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
- MD5 97a96877fc2c184b0e73e85529b34822
- SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
- SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
- SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
- TLSH T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
Include/VB6/VMProtectSDK.bas
- SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
- MD5 30d0ac58f09ba02d81dde6ea9067b582
- SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
- SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
- TLSH T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
- MD5 SHA1 SHA512 TLSH
Langs/de.lng
- SHA256 5c56a15e90fcb124be61cc3ba06384016361023e56d35379f08395c1ef2eeac6
- MD5 7e20bccae3756a760ad009e5b446a568
- SHA1 636c7ae3d78d3c6ef4bbdd8fbad3ec771a58d078
- SHA512 a864b6d52a13fd8e4f56809535b2dabf1fceac2bb3ed375a013e02c09a319f47cd70a2ec5bc5a229fbd4247e2a66afd76b9dfea4691283560aa13698abda773b
- SSDEEP 192:UQmLI/xiNfj1J5CUGvJ1D4XRYIe9kZ4vPs52dzxLGk3HfVUH/EuULNP9sPRY1zex:r83IqhY7eZ2zxLGkPe6spvDXF
- TLSH T1DF3208150E08628FD3D32BB67540C86B37B4C36917B020A3088CE3E75B97D7D9B6E596
- MD5 SHA1 SHA512 SSDEEP TLSH
Langs/en.lng
- SHA256 f5c9bacd8f85ac4348e5bd32fa4d2fc85afdaaea58c357bc0136a0806649422b
- MD5 22531da3e31d4dcef333554553d2325c
- SHA1 a2fa02b336cd6386a445662bff54cf3f73461560
- SHA512 67a5fd9e66b57ab5c5927f213aa3530b7ba563316a3abb71bc4ce28b0c54a609b3f00091d4bd718f9f24b32098e6cf20ca1724a51d8dc4b0e2d7fcff2be5d36b
- SSDEEP 192:rORjTHv17nwN71QIgWSeaDNVsJG1EDN6uXxjw2UkVH/bvohKVKeElDt7deAnaR70:a/Hi95S/DnsJG2DMSxjw2U0uuAnaR72h
- TLSH T1DA22B50D2704629715D301B7BB528CA3A7B5825C6674020718ACE7E827E7D3CEBBBAD5
- MD5 SHA1 SHA512 SSDEEP TLSH
Langs/fr.lng
- SHA256 b35d3bab6a63e8191340b9b18a5ed5e0eb86fe65f9dfe9d17696839a102314e3
- MD5 eee0c8e57a4d0a3dcfb1bcbf50e5b9b9
- SHA1 cb1d6cdf7ce3433a706f436e7cfd3770b01ebe11
- SHA512 f759b0c77e7392d2e7842372027bf174218b536d7e23d229bbab30b0f558c4b30711e826a3f28b4c372334a493af1453d13e9f910f1ba153e30fb0b0f5a60193
- SSDEEP 192:aj2o6S4kp87L1NG3Ck2dM0x10NZapGYx1MvvWmPyYNNtPAhcy+LVS9n2rfgiXl87:IT3b2+08TY1MGmPyYa+h4nIoiV80S5
- TLSH T1BD32B50EBA80614763D312F7B552D527A638C2547A19F2064CC8A7E863EFD3CD38F999
- MD5 SHA1 SHA512 SSDEEP TLSH
Langs/ru.lng
- SHA256 d440e0994921253b5ca88e244eb697aa3967c6f396b2f668de489fcad43b89bd
- MD5 dcc3d1a7d77407c5505ebd737b78a64b
- SHA1 607f517f198885eace13cbbd2cad7238a7047fe5
- SHA512 be2b910f377cd1a1de6a9299990546e28f1ab6a9dd01ea5d378adc2a9d214b93796a84dd68989acf1c02953b5fbdad27ec1a3016888141213f07a910b3b9d5f9
- SSDEEP 384:Xr2mIZLqvf0Vu7Ebi0FxF71Ki4aRkjEPve4AN8V3rsr92OQqa4k:Xr2q7SxFRRD+92OQz
- TLSH T14AA2F34FFAFC5114B5B6DA40AF3189D206EAB7102B19C0DD86CF2C5A1478AB477227E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Langs/zh.lng
- SHA256 39ff0ffe1532ed801b8ca99ebf8bc7566b2dd5b4b18645e2319c5da796b110c5
- MD5 de13bbcc687ad3762a073f102b99e95c
- SHA1 a3a721d5c610fe0ee5f6eb60ea6c97f291bbf2d4
- SHA512 a4bc69f4bc419008d4d86eef4ecf32ddd5c285fe18571c81d62a8bc99e2feec6471ad156a783b7aabe5851bcc826ef1be79d1ad304a80ed9a2ff18ec620649a4
- SSDEEP 384:ENm0bnMYC5qftk8ns3CMUitEJURa2RBaOzI/9XPZO:ENmUI4n8CMQiRdzI/9XPk
- TLSH T18A52540127FE6019F6F79F98EAB894564BBBBC261E1DC12D95C4404E18B1E808A777F3
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Linux/libVMProtectARM64.so
- SHA256 00aecc09e863c526c691b8b5c2fbb513a8f48b763fd18225015318a756e32656
- MD5 57a740a420b55397b7facc447995a73a
- SHA1 49e3e7b24ec32aff2004e4087e2e3bf5b3e53f86
- SHA512 d11fc0fbc04dd466ab6ae6d14ca49f52f0bd09b126f0313a11a7548c77e77b2b197594549ede836d8a6114a47576da932cb2f08a381da94241b398d79676bee8
- SSDEEP 768:aDECFjDjCiM0e8AJ5+IsZ2eLORxrz+4CAbdP2QW1:W/jDjzTAJ5+tZHqfEAbdeP
- TLSH T1B903B706EB80EE2FC4DD5374656B4F6413318018939FE757A12502956E933CEAFAE2CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Linux/libVMProtectSDK32.so
- SHA256 7e73d0a80d90db432a87e6daf075ad2add7cead3918c6025094fa8df8ade7f0c
- MD5 1e619078dd43b175f220e37b9ed824c5
- SHA1 f915a98d0a7134694a2de1efe244135ff909fc7c
- SHA512 be6eeb90cd18bc0d097293f94be631714b4985420dd21be5e703efdfbe8c427a4c2d650557a1508b53683d5bc053c677a3dd08d03a326ac64cb1ea017e2fe8e0
- SSDEEP 768:1q6qsfBcgboedwWi4W1TDzRW/tX17g3VMx:IsWgbobJv1DRW/aC
- TLSH T1F7E21947AF84A93AC4C60575126BCF191336C0724EB2CF53B62847645E933CDAEA728F
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Linux/libVMProtectSDK64.so
- SHA256 5bd072d40820b70383a059bb0a8ace695fcb3e526a643dd21d0528b5b9b0f5e4
- MD5 7fb8f3b45b0432477f5fd1e21a8c1673
- SHA1 531691a33c1ee41d31c4bffcc7a66172c02bab62
- SHA512 fff085406ad2b0f858bad3a7c546c621cff91252a169e44ebf91af9ab62586a352894c5cedb402dad21044fbccae4fa0d26d3f8209c987fca68a64f7c50dd311
- SSDEEP 384:luE6TFC8ojUq3MUibTD4LO3U9f3sXVTbpgK+gxo/A4/o3i3tbzMRaOdm2xN:lL6TapAD4LOsJKFob/Ai3tbaaEvN
- TLSH T12F031A47AF84EE3FC4ED4371A55BCF5C1330A05087A6D71B221482A42F577CD6EAA28B
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Net/VMProtect.SDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 774ac5f0e7f795ba41cf4ff3ce09e3a2670b862831083778a4140894e4f1d125
- MD5 396ac889c048603a575d05541f1c1311
- SHA1 061834b997aaf5c3e629e0a0fb9afb099f15f2a7
- SHA512 d55198bdcf80ea29c850c9f12c911bf81f44510874678293ac921601e457c9d060011d780881bb3a6108d5a754f519ab270bf02628bdb1ed63092d49873b03b9
- SSDEEP 96:SbeBWY8lNW5lleUWbgjaJvbdI8cH4YJNSscbNVOz8RpFxrPOPXCr3c7+AsLtFSVF:EY8zWUUOgjSjR+JxzwFxrxA88
- TLSH T10F22B712B3E8A156F5FB67356D7211310BB7BA994A72CE3F148C010F0B37A546BA0B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
arhajrhakerhekrwerj2453
Minor OS version
0
Major OS version
4
Entry point
15898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Lib/OSX/libVMProtectSDK.dylib
- SHA256 d335780968e5e8742ebd8f748fb2ec372c4f1a5922cfc0fd64c15dc8921be41f
- MD5 4250f8ab6e2f6594779a511c69964a22
- SHA1 fb86ba0a222a1f382a62822e966fc44607560d33
- SHA512 9c9b13d974f1e38a587ea1b0fd761b91a2cc69b26e752b0102ee11c97cf9a8945f8bebc07966b42b86b1ab407373abf9b048a046365a5bff7b1272869292be17
- SSDEEP 768:gC3w0MnwZI1l1d4x02QsiURWO9aSIlpJ73IKaQfF19YR0WwMykBGetF5+ss24d6u:VKnwUhz38y24dpt
- TLSH T145C3F917EB05A427CA8D90F4929FCF6AB035F16011B7C763B661D1682FA67883E5680B
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Windows/BCC64ELF/VMProtectSDK64.lib
- SHA256 b1262e6e80f3bb34ccd4270ec9b9d040fce9e85ee5f07c86b48f8c86e0417359
- MD5 c8741887d6a3e009abbfa2402218b0bb
- SHA1 6c0c3707bbf1819f656ca3697f1dba270db1dbe2
- SHA512 1ceacd9c489a7b993869a7dfdcb44323e8dd1907b16aeb8beba95ad408a72f23f7fe1417b775dcd7007a83733e9a8c8d739c66a1276129b08e7e1d7ecd4aa4ee
- TLSH T17751FE1C8981392FC4F690F93722DDB4B279804681F2C757710E63A08B633CF6B9668B
- MD5 SHA1 SHA512 TLSH
Lib/Windows/MinGW/VMProtectSDK32.a
- SHA256 2172b716a942408e94c6a2dc0d6c9ad1078e3388a748fd1a2a05b3c22086469d
- MD5 85ec3bdcf59e7d18ec4e28f855c66fe0
- SHA1 2eff7ac3eebba5fd7081ab2df964caefdca96ed0
- SHA512 e4b199521f6d90ba1f9172872e97d51254040ac1ca0aeadf757051cf74aec63a81e118e89c58fd1cc9d196dc16aac2f115a9c6b06cc4fe32e245a7ebc91a152d
- SSDEEP 192:f6gR08VksnJIAqDryMNNj3aNcsGI0BvMtun7j:1R0CoMFW3
- TLSH T12492D2B2B2925DCBD27241BD9647EF11273CF0E249A6DB33322C65610BD1D8A3EC2587
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Windows/MinGW/VMProtectSDK64.a
- SHA256 074389443c148fb836c160df6bdd97ffa9a3615191098e9e5ca62b7db33cc225
- MD5 eb5af2d49eec030fac96ebd4c19bac62
- SHA1 e919f4260d07843d3995707254b70396273f43fa
- SHA512 891baf622cfb96adfa6844903409a7c1d05456d0d62cfe6f85becdf0ea9b7ac0c28d579e0d6883d3b04a8f8e507d9ce727407ab890ea8faa61f43bd5971c40e4
- SSDEEP 192:RuZGP2eTY6AfBZQ9MBiGZQUuK8tLjMKSA:Rm2
- TLSH T12682F1B2F2E25D9FD67181BE1656EF212B7CF0D20166CB27322C19210B96E863FC5587
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Windows/OMF/VMProtectSDK32.lib
- SHA256 06497f7b7d9670bdc832506b00707eae521f310eaaa5998ec6f6f4bdfadc1e87
- MD5 0e1a96050ea2afc299dc4d05a327b044
- SHA1 0627d91000c0e06c4a8d8c80d257ffc709ceb688
- SHA512 309518a1a6d23843f675d0e2173f0f85f5adc3049eed9b91b8cbe64796d8ab166ca0f9dc82c43c85102cdfa2b8e54978a459fe097486f2ead6557e00288e3f46
- TLSH T1BA71373A19513A6FC4E390FA2A56CD9AFAB471D51AF1C573A7A111BF0F2E08C372504B
- MD5 SHA1 SHA512 TLSH
Lib/Windows/VMProtectARM64.dll
- SHA256 95c36dbc84fde8674c4d47c68f2a0a575e92ba136fb54100bb14ec680cabad8d
- MD5 18d63414f1f53d12cc74287106e40e7b
- SHA1 96abc1e430d9fa4b8e7c0bc230b5ad63d44253ad
- SHA512 a376bce05866cf84f1e656d379e75fcf9ad7dd4910a5667b44d5441f10885625674c0c07b307abcd89d86182efca14b305fcb565945995a57d3066f118d60aa4
- SSDEEP 1536:XBUJ1mU+JN4aJK0gHLhAJoei31yskAT+CRQJTv7sWv0dPgy:XBUv6N7K0+h4G5k1TleP9
- TLSH T1A4B35C53B78D2807E1E2DB38F8574F50633FB97484248E4AB202425CDD97BC99F769A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Windows/VMProtectARM64.lib
- SHA256 25c325113cc4802eee53555a38cf6a176eb0b37c7db08a5af29db2c67159b5a1
- MD5 b494ffa5646ca6ebe73cb5ba9e83996e
- SHA1 dae1cb854e6b672b3638e1dde69e7e4ceaf6a8b7
- SHA512 c11bf9a3fa910948bf16ae636a84bfe7d29b1b49e072e8f4b6ccdeec0a6de26140f198c46c3253e9b85349346e1576294531fffdccb0504a6c9d6a521e2bea3b
- SSDEEP 48:9ZN/k5RLRzRCRXB6cI15AXy/F/CRcRj15T17RLRyIBrJX4CKsyAOL9Kfp5qK/MpX:9PkqBi1bruCKdK6K/MWTbrno
- TLSH T1A1E1B9365950BC2FC4EAC0F93B62DCA4396D004602F2D47BB28D269243B275F67C368B
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Windows/VMProtectDDK32.lib
- SHA256 c57c4aecb44fecb050bb2cb41fda40e43c1ac9317460e89b09a7793020a70a9f
- MD5 8808bdf95e8182f712897c9d0354a4b5
- SHA1 c99e48bc4196244900ffb7fe03e51a93e12e544d
- SHA512 891d31248e8e50b3fa64ce0c7d4f2e3e4ae399ac285bdcd30f2bfba4090b576a851124a318f41322f96bf1e9dcd588dcc7ec3324543006c3d85d06f77a4bb4a5
- SSDEEP 96:Ekm/+uYlVlCKU3v/hknv/KzKyK578G9ZQu+:DVlG/h2fgbh
- TLSH T111F1AD376892BE1FC5F6C4FAF292DC983E2C344A02F5EA77701D418153BA5AD679A007
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Windows/VMProtectDDK32.sys
- SHA256 5ba9aef8e17fd89a3a70e767878f099a9ed6d96b7fd83459864334cbbf401e7f
- MD5 941f10363ef51c84a3076414d9430844
- SHA1 b8724661b462a7df052a2c392cb7e18662162227
- SHA512 35508e8a74a36ce6f7ee73cc1129c97ba42f8aec219ac20243f043a157c0744351a711bfd2ac6956b8fb88a8bc219ab7768f1912446072522dee4901add17009
- TLSH T15D5177068951763FD0DA81F93B66CC263438410153F6C3D7972107256B813DF3A3958B
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
arhajrhakerhekrwerj2453
Minor OS version
1
Major OS version
5
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1024B
Virtual Size
854B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Lib/Windows/VMProtectDDK64.lib
- SHA256 3e795303f1226cfaa7106116ed913ceac8e44b962d61435bf04b5d3c0462e575
- MD5 8edc8488ecea779cb3fa811b67baea49
- SHA1 a04d04050f1afe5f1c4d47b4fe3cedd420855011
- SHA512 5821fac2b0d297b095261798c51bb50adf39d6b86a4d9ce015220335d63e050a3c00cca8557ef8b780afac57f133c0827701e1f5087fd0640e2b22f9367ef29c
- SSDEEP 48:zZj/k5RLRzRCRXB6cI152Xy/F/CRcRj15T1sRLRyIBr/X4nKryAOjgKp35PKiRRb:zNkqB41CrgnKpKvKiObctJrH
- TLSH T1C0E18B395891BD0FC5FAC4FA7B22ECA97B9D104102F5E96B340D8B51836276FA387207
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Windows/VMProtectDDK64.sys
- SHA256 6fde44b1b4c3e54f779938e49d3fd316baaa32dca241ac1459bb17a71f9c8dc3
- MD5 b7108a75e768f7537ef1c2a441390e0d
- SHA1 5673aef3246241d2100d0a48183343e547852a83
- SHA512 a453e52e092afb337eb9f367db746c39e482a29209c7d7c5305d0b22c1baaf3669a7b83bff8efaae5d5419b997e4e5a1b11ac8ed44d65d9e05aafa4cbde13bd6
- TLSH T1C581DF02958135BFD4CA48F93BE2EC553678001953F3C1D7975217261B427DF323954B
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
arhajrhakerhekrwerj2453
Minor OS version
2
Major OS version
5
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
512B
Virtual Size
115B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
15B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1024B
Virtual Size
854B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Lib/Windows/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 6e59aef45a255799f550c09b6e52d7ae6e28e3af21414c6b11bc2e3091f352c5
- MD5 4879172129a41fa9d51a8a68beacc71d
- SHA1 63278e71360d6d1fa3a05d86de01946e2ec93da3
- SHA512 1a2d2e329903b9f2b5f1401885ccd5c1fe64c92505bcfb8842825d58b498e9fbf249843951dc25d121fe8751c595cc8bdff0b9fda00149ffd60cec9f01b3f908
- SSDEEP 1536:TB3bkLmdI52QC2mCYKw2cr2RhX4cSxpnnDw2C1+XroJQusWMIcdwIYXowGF:fhQC2mCYK3RhIcSDnk2byMJwIYRG
- TLSH T1E4A36B10B4D1C432E0BE19380535D5A15B3E7830EF64AD9F73941AB99EB42D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
arhajrhakerhekrwerj2453
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Lib/Windows/VMProtectSDK32.lib
- SHA256 6ff60abf1d453e0fefcd0ce0530556e229bf87079225e0c8a584fa16256d6853
- MD5 8a4aba73d1eba6c5ac080e958d936937
- SHA1 a397bd91f409b757e971571ca98a30b5b4a91300
- SHA512 2b7fd093db797bf8ca05212393b8d4b152f55e6f4768bc8ebdba264ce09250888a29f572402b623c1c857a8e3e6b5e9b6aa64d6108cc6ac7b825f48af1bfd999
- SSDEEP 96:pCm/+uYlVlLKU3A/hknQbK4KXK+teBcfGxkGzguz:cVlU/hpi1PQ
- TLSH T1C7F1463B18A23E2FC4FAD0F9F292DD99352C304604F6E667716D44D223AE58E679B107
- MD5 SHA1 SHA512 SSDEEP TLSH
Lib/Windows/VMProtectSDK64.dll
- IMPHASH 1851ff453adce0cef5274e320d5bed3c
- SHA256 ec3235136a4daee2a6f72c0f2994a8365ca8427c8068d068130b74c9fa64cd02
- MD5 c0ce8c981bda19d2be17aca0774d9df1
- SHA1 895052a42efa50043f473f072578bee69be8d2f8
- SHA512 1578948dba2492263c0b174816451218c70df89e6b4440981db9513c664d97f6253fc1c0dab4164c620b9cb7794f4789677a0c38e0a5ac9636aee1dbc3d16062
- SSDEEP 3072:0RcqYHq7Aiytzg2ScpvgJcLYsqYX6UDdyBo:K0Hq7AiyegZgJoZXBa
- TLSH T171C35B47B3E540BBD1B6C679CD234A56D3B678150B249BAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
arhajrhakerhekrwerj2453
Minor OS version
2
Major OS version
5
Entry point
8864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
Lib/Windows/VMProtectSDK64.lib
- SHA256 9997a9c6e179010450385832a66ea36938e180fc9067d91fd6aae7c9f6bf4d18
- MD5 6e597e4be8eb765dcfd4b058c463bb7b
- SHA1 4eda19892928cf64c4e3e9a9e9e4c533ec70230f
- SHA512 3895946dedbf25f5ab279370d3315ed93b5d09ec35789a2721f6b7b0717faf06d0d02659e682d592113f77dd8fe70f4739952588b50c4124535968550aebcb99
- SSDEEP 48:lZ5/k5RLRzRCRXB6cI15gXy/F/CRcRj15T1tRLRyIBrzX43KXyAOUMKnFS5vKas5:ljkqB61xr83KIKFGKaWdlmkArg
- TLSH T128E1763959E17D2FC6EAC1FA7B21DCA97E6D404101F7E46B308D4BA2432A65FA347207
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect.exe
- IMPHASH c96cbfaa48f620ce16fd692d1cf01768
- SHA256 138d140584e3d703c3592cc3cd15124b428daee75629e25710b65228103ff817
- MD5 fe633bd52b85a6742aad8cfda32d1ae8
- SHA1 011cbf13a6a2dd8d3607657848032e1d57170c4e
- SHA512 6a0d90cd6c6b03cbf0a44894d3fb682a5c2a0e1cdbf1d507b291ea43dbaae15c4c9207f56439a5a9ae45e1cc88c809d6bb5db023adf27b3afa6480057109d80b
- SSDEEP 786432:pKBjq16XQwb9lcVg1j3ir1PjJU8J19TiDU7oXf:pamAXQ89l8Y4Pt19TiP
- TLSH T1727723966C98475EC4C8C635D1091BFDE2D93CB94D76881B7FC62D022E3AD63CCE1A26
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Password
arhajrhakerhekrwerj2453
Digest
39:94:84:c8:f4:de:da:6b:a0:b3:7a:17:52:af:b8:bc:70:a6:d6:d6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Chains
Mar 20, 2026
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Serial Number
07:25:df:15:2a:5b:89:92:f3:68:49:ae
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 23, 2023 - Jun 17, 2026
Minor OS version
2
Major OS version
5
Entry point
87219451
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
winmm
PlaySoundW
imm32
ImmReleaseContext
opengl32
glDepthRange
ws2_32
WSAAsyncSelect
kernel32
GetSystemTime
user32
MessageBeep
gdi32
RemoveFontMemResourceEx
advapi32
CryptGenKey
shell32
SHGetFolderPathW
ole32
OleSetClipboard
oleaut32
GetErrorInfo
psapi
GetModuleFileNameExW
Name
.text
Size
Virtual Size
16.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
21.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
239KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
917KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.qtmetad
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.e)l
Size
Virtual Size
13.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.dJ+
Size
512B
Virtual Size
264B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.TTN
Size
31.3MB
Virtual Size
31.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
339KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
VMProtect/Code Markers/BCB/Project1.bpr
- SHA256 159aeb90d8312faced21545f128e1175f7858edf455a9ebc8d06b15b61b5a97f
- MD5 c4f092473b8764d59c497d3d6dde218a
- SHA1 6851e7e83efd0ea0195040a0f80e96f02d4a3452
- SHA512 f1d12bf106012dadc045ac4c8c8f168308e2209b1c00486e560968eefe37e6439ba7e9b8b8319ec05775959d8acf98aa9febb72188060ec19e23be59d45b32a7
- TLSH T1E8817212A5C8CD42B3796C5235026E48F95ECA8B00204CAD35D4A4AF1FBFC7B623B52F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/BCB/Project1.cpp
- SHA256 cbee2dab09546ee539d7c1b6e6d788a8c9181044957788b4dfbcd45f6d4977c8
- MD5 fffbbb4cf4620d71ae9037ef29370fd2
- SHA1 9b5403b0e1272f69bef82a71be47fa9f542ca158
- SHA512 fc20feafb9fef17e3bb291ef378d0701697acfa35f50407cf3fe6d09440078a2971e8803e14bfd3a740141166be5bd54fb8385113578515996d1c9da24cfacea
- TLSH T152116D9AAD5585A392B3E6BA03365180EABB967F0FD20112F68C91189FF1169C14FF42
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/BCB/Project1.exe
- IMPHASH 532c62395891b8320957c654d6524f07
- SHA256 ad0876324839c5098ece43c8cd1f6ccca9bc1746045c167a8f4d3b4ce255e60a
- MD5 c2343e61f464d18099f748d49ed292f6
- SHA1 ba0614de2b0c3dff2f1a06096d7ae8a4bfa3c1c1
- SHA512 0a795f34fc10d98c9a9a43c236d60c6dee2639ba646ac58c4f6a1055c704c5393435ee8df543c07216ba64c8ab39845f52c65723d419c8d254e6c552b882bef6
- SSDEEP 6144:0s8xf99OJHuf9iJ3KutaCF1fdlCTEg4N5flQSMh:0NOJHoMKJCFVRQSM
- TLSH T13F244B32FA59CC3EE06245782B6D6A3294765930AA88D253F3E45F4CBDF61D0631A31F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
arhajrhakerhekrwerj2453
Minor OS version
0
Major OS version
4
Entry point
8316
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
vcl190.bpl
@Vcl@Consts@initialization$qqrv
@Vcl@Consts@Finalization$qqrv
@Vcl@Graphics@initialization$qqrv
@Vcl@Graphics@Finalization$qqrv
@Vcl@Graphutil@initialization$qqrv
@Vcl@Graphutil@Finalization$qqrv
@Vcl@Toolwin@initialization$qqrv
@Vcl@Toolwin@Finalization$qqrv
@Vcl@Printers@initialization$qqrv
@Vcl@Printers@Finalization$qqrv
@Vcl@Stdactns@initialization$qqrv
@Vcl@Stdactns@Finalization$qqrv
@Vcl@Comstrs@initialization$qqrv
@Vcl@Comstrs@Finalization$qqrv
@Vcl@Extctrls@initialization$qqrv
@Vcl@Extctrls@Finalization$qqrv
@Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv
@Vcl@Extctrls@TLinkLabel@$bcctr$qqrv
@Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv
@Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv
@Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv
@Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv
@Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv
@Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv
@Vcl@Stdctrls@initialization$qqrv
@Vcl@Stdctrls@Finalization$qqrv
@Vcl@Stdctrls@TStaticText@$bcdtr$qqrv
@Vcl@Stdctrls@TStaticText@$bcctr$qqrv
@Vcl@Stdctrls@TListBox@$bcdtr$qqrv
@Vcl@Stdctrls@TListBox@$bcctr$qqrv
@Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCheckBox@$bcctr$qqrv
@Vcl@Stdctrls@TButton@$bcdtr$qqrv
@Vcl@Stdctrls@TButton@$bcctr$qqrv
@Vcl@Stdctrls@TComboBox@$bcdtr$qqrv
@Vcl@Stdctrls@TComboBox@$bcctr$qqrv
@Vcl@Stdctrls@TMemo@$bcdtr$qqrv
@Vcl@Stdctrls@TMemo@$bcctr$qqrv
@Vcl@Stdctrls@TEdit@$bcdtr$qqrv
@Vcl@Stdctrls@TEdit@$bcctr$qqrv
@Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv
@Vcl@Stdctrls@TGroupBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv
@Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv
@Vcl@Stdctrls@TScrollBar@$bcctr$qqrv
@Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv
@Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv
@Vcl@Stdctrls@TRadioButton@$bcctr$qqrv
@Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomButton@$bcctr$qqrv
@Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv
@Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv
@Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv
@Vcl@Stdctrls@TButton@
@Vcl@Stdctrls@TEdit@
@Vcl@Stdctrls@TLabel@
@Vcl@Listactns@initialization$qqrv
@Vcl@Listactns@Finalization$qqrv
@Vcl@Comctrls@initialization$qqrv
@Vcl@Comctrls@Finalization$qqrv
@Vcl@Comctrls@THeaderControl@$bcdtr$qqrv
@Vcl@Comctrls@THeaderControl@$bcctr$qqrv
@Vcl@Comctrls@TStatusBar@$bcdtr$qqrv
@Vcl@Comctrls@TStatusBar@$bcctr$qqrv
@Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv
@Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv
@Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv
@Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv
@Vcl@Comctrls@TPageScroller@$bcdtr$qqrv
@Vcl@Comctrls@TPageScroller@$bcctr$qqrv
@Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv
@Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv
@Vcl@Comctrls@TCoolBar@$bcdtr$qqrv
@Vcl@Comctrls@TCoolBar@$bcctr$qqrv
@Vcl@Comctrls@TToolBar@$bcdtr$qqrv
@Vcl@Comctrls@TToolBar@$bcctr$qqrv
@Vcl@Comctrls@TListView@$bcdtr$qqrv
@Vcl@Comctrls@TListView@$bcctr$qqrv
@Vcl@Comctrls@TCustomListView@$bcdtr$qqrv
@Vcl@Comctrls@TCustomListView@$bcctr$qqrv
@Vcl@Comctrls@THotKey@$bcdtr$qqrv
@Vcl@Comctrls@THotKey@$bcctr$qqrv
@Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv
@Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv
@Vcl@Comctrls@TUpDown@$bcdtr$qqrv
@Vcl@Comctrls@TUpDown@$bcctr$qqrv
@Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv
@Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv
@Vcl@Comctrls@TRichEdit@$bcdtr$qqrv
@Vcl@Comctrls@TRichEdit@$bcctr$qqrv
@Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv
@Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv
@Vcl@Comctrls@TProgressBar@$bcdtr$qqrv
@Vcl@Comctrls@TProgressBar@$bcctr$qqrv
@Vcl@Comctrls@TTrackBar@$bcdtr$qqrv
@Vcl@Comctrls@TTrackBar@$bcctr$qqrv
@Vcl@Comctrls@TTreeView@$bcdtr$qqrv
@Vcl@Comctrls@TTreeView@$bcctr$qqrv
@Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv
@Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv
@Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv
@Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv
@Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv
@Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv
@Vcl@Comctrls@TTabControl@$bcdtr$qqrv
@Vcl@Comctrls@TTabControl@$bcctr$qqrv
@Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv
@Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv
@Vcl@Dialogs@initialization$qqrv
@Vcl@Dialogs@Finalization$qqrv
@Vcl@Dialogs@MessageDlg$qqrx20System@UnicodeString26System@Uitypes@TMsgDlgType54System@%Set$t25System@Uitypes@TMsgDlgBtn$iuc$0$iuc$11%i
@Vcl@Menus@initialization$qqrv
@Vcl@Menus@Finalization$qqrv
@Vcl@Imglist@initialization$qqrv
@Vcl@Imglist@Finalization$qqrv
@Vcl@Actnlist@initialization$qqrv
@Vcl@Actnlist@Finalization$qqrv
@Vcl@Controls@initialization$qqrv
@Vcl@Controls@Finalization$qqrv
@Vcl@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp21Vcl@Controls@TControlr19System@Types@TPoint
@Vcl@Controls@TWinControl@UpdateTIPStatus$qqrv
@Vcl@Controls@TWinControl@DockReplaceDockClient$qqrp21Vcl@Controls@TControlp24Vcl@Controls@TWinControlt119Vcl@Controls@TAlignt1
@Vcl@Controls@TWinControl@SetParentBackground$qqro
@Vcl@Controls@TWinControl@CanAutoSize$qqrrit1
@Vcl@Controls@TWinControl@AssignTo$qqrp26System@Classes@TPersistent
@Vcl@Controls@TWinControl@UpdateStyleElements$qqrv
@Vcl@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1
@Vcl@Controls@TWinControl@CanResize$qqrrit1
@Vcl@Controls@TWinControl@GetClientOrigin$qqrv
@Vcl@Controls@TWinControl@GetControlExtents$qqrv
@Vcl@Controls@TWinControl@Repaint$qqrv
@Vcl@Controls@TWinControl@Update$qqrv
@Vcl@Controls@TWinControl@Invalidate$qqrv
@Vcl@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__
@Vcl@Controls@TWinControl@ShowControl$qqrp21Vcl@Controls@TControl
@Vcl@Controls@TWinControl@SetBounds$qqriiii
@Vcl@Controls@TWinControl@SetParentDoubleBuffered$qqro
@Vcl@Controls@TWinControl@CustomAlignPosition$qqrp21Vcl@Controls@TControlrit2t2t2r18System@Types@TRectrx23Vcl@Controls@TAlignInfo
@Vcl@Controls@TWinControl@CustomAlignInsertBefore$qqrp21Vcl@Controls@TControlt1
@Vcl@Controls@TWinControl@CreateHandle$qqrv
@Vcl@Controls@TWinControl@DestroyWnd$qqrv
@Vcl@Controls@TWinControl@$bdtr$qqrv
@Vcl@Controls@TControl@InitiateAction$qqrv
@Vcl@Controls@TControl@GetFloatingDockSiteClass$qqrv
@Vcl@Controls@TControl@CreateTouchManager$qqrv
@Vcl@Controls@TControl@SetBiDiMode$qqr24System@Classes@TBiDiMode
@Vcl@Controls@TControl@GetText$qqrv
@Vcl@Controls@TControl@SetEnabled$qqro
@Vcl@Controls@TControl@SetName$qqrx20System@UnicodeString
@Vcl@Controls@TControl@SetAutoSize$qqro
@Vcl@Controls@TControl@SetDragMode$qqr24System@Uitypes@TDragMode
@Vcl@Controls@TControl@GetAction$qqrv
@Vcl@Controls@TControl@GetEnabled$qqrv
@Vcl@Controls@TControl@GetDragImages$qqrv
@Vcl@Controls@TControl@$bdtr$qqrv
@Vcl@Themes@initialization$qqrv
@Vcl@Themes@Finalization$qqrv
@Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv
@Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv
@Vcl@Forms@initialization$qqrv
@Vcl@Forms@Finalization$qqrv
@Vcl@Forms@TApplication@ShowException$qqrp25System@Sysutils@Exception
@Vcl@Forms@TApplication@Run$qqrv
@Vcl@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv
@Vcl@Forms@TApplication@Initialize$qqrv
@Vcl@Forms@TForm@$bcdtr$qqrv
@Vcl@Forms@TForm@$bcctr$qqrv
@Vcl@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv
@Vcl@Forms@TCustomForm@RequestAlign$qqrv
@Vcl@Forms@TCustomForm@UpdateActions$qqrv
@Vcl@Forms@TCustomForm@ShowModal$qqrv
@Vcl@Forms@TCustomForm@SetFocus$qqrv
@Vcl@Forms@TCustomForm@CloseQuery$qqrv
@Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState
@Vcl@Forms@TCustomForm@PaintWindow$qqrp5HDC__
@Vcl@Forms@TCustomForm@SetFocusedControl$qqrp24Vcl@Controls@TWinControl
@Vcl@Forms@TCustomForm@DefaultHandler$qqrpv
@Vcl@Forms@TCustomForm@DestroyWindowHandle$qqrv
@Vcl@Forms@TCustomForm@DestroyHandle$qqrv
@Vcl@Forms@TCustomForm@CreateWindowHandle$qqrrx26Vcl@Controls@TCreateParams
@Vcl@Forms@TCustomForm@CreateWnd$qqrv
@Vcl@Forms@TCustomForm@CreateParams$qqrr26Vcl@Controls@TCreateParams
@Vcl@Forms@TCustomForm@AlignControls$qqrp21Vcl@Controls@TControlr18System@Types@TRect
@Vcl@Forms@TCustomForm@ClientWndProc$qqrr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@WndProc$qqrr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2
@Vcl@Forms@TCustomForm@SetParent$qqrp24Vcl@Controls@TWinControl
@Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@SetParentBiDiMode$qqro
@Vcl@Forms@TCustomForm@GetFloating$qqrv
@Vcl@Forms@TCustomForm@GetClientRect$qqrv
@Vcl@Forms@TCustomForm@DefineProperties$qqrp21System@Classes@TFiler
@Vcl@Forms@TCustomForm@ReadState$qqrp22System@Classes@TReader
@Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation
@Vcl@Forms@TCustomForm@Loaded$qqrv
@Vcl@Forms@TCustomForm@DoDestroy$qqrv
@Vcl@Forms@TCustomForm@DoCreate$qqrv
@Vcl@Forms@TCustomForm@$bdtr$qqrv
@Vcl@Forms@TCustomForm@BeforeDestruction$qqrv
@Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponenti
@Vcl@Forms@TCustomForm@AfterConstruction$qqrv
@Vcl@Forms@TCustomForm@$bcdtr$qqrv
@Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponent
@Vcl@Forms@TCustomForm@$bcctr$qqrv
@Vcl@Forms@TScrollBox@$bcdtr$qqrv
@Vcl@Forms@TScrollBox@$bcctr$qqrv
@Vcl@Forms@TScrollingWinControl@AdjustClientRect$qqrr18System@Types@TRect
@Vcl@Forms@TScrollingWinControl@AutoScrollInView$qqrp21Vcl@Controls@TControl
@Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4%
@Vcl@Forms@TScrollingWinControl@DoGesture$qqrrx30Vcl@Controls@TGestureEventInforo
@Vcl@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv
@Vcl@Forms@TScrollingWinControl@$bdtr$qqrv
@Vcl@Forms@Application
@$xp$15Vcl@Forms@TForm
@Vcl@Forms@TForm@
@Vcl@Clipbrd@initialization$qqrv
@Vcl@Clipbrd@Finalization$qqrv
@Vcl@Mask@initialization$qqrv
@Vcl@Mask@Finalization$qqrv
@Vcl@Grids@initialization$qqrv
@Vcl@Grids@Finalization$qqrv
@Vcl@Grids@TDrawGrid@$bcdtr$qqrv
@Vcl@Grids@TDrawGrid@$bcctr$qqrv
@Vcl@Grids@TStringGrid@$bcdtr$qqrv
@Vcl@Grids@TStringGrid@$bcctr$qqrv
@Vcl@Grids@TCustomDrawGrid@$bcdtr$qqrv
@Vcl@Grids@TCustomDrawGrid@$bcctr$qqrv
@Vcl@Grids@TCustomGrid@$bcdtr$qqrv
@Vcl@Grids@TCustomGrid@$bcctr$qqrv
@Vcl@Buttons@initialization$qqrv
@Vcl@Buttons@Finalization$qqrv
@Vcl@Buttons@TBitBtn@$bcdtr$qqrv
@Vcl@Buttons@TBitBtn@$bcctr$qqrv
@Vcl@Categorybuttons@initialization$qqrv
@Vcl@Categorybuttons@Finalization$qqrv
@Vcl@Categorybuttons@TCategoryButtons@$bcdtr$qqrv
@Vcl@Categorybuttons@TCategoryButtons@$bcctr$qqrv
@Vcl@Buttongroup@initialization$qqrv
@Vcl@Buttongroup@Finalization$qqrv
@Vcl@Buttongroup@TButtonGroup@$bcdtr$qqrv
@Vcl@Buttongroup@TButtonGroup@$bcctr$qqrv
@Vcl@Styles@initialization$qqrv
@Vcl@Styles@Finalization$qqrv
@Vcl@Styles@TStyleEngine@$bcdtr$qqrv
@Vcl@Styles@TStyleEngine@$bcctr$qqrv
rtl190.bpl
@System@initialization$qqrv
@System@Finalization$qqrv
@System@UTF8ToUnicodeString$qqrpxc
@System@FreeMemory$qpv
@System@@CheckAutoResult$qqrl
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@FindHInstance$qqrpv
@System@@DynArrayRelease$qqrpv
@System@@DynArrayAddRef$qqrpv
@System@SetAnsiString$qqrp27System@%AnsiStringT$us$i0$%pbius
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromPChar$qqrr20System@UnicodeStringpc
@System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$%
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius
@System@@LStrInsert$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%i
@System@@LStrDelete$qqrr27System@%AnsiStringT$us$i0$%ii
@System@@LStrCmp$qqrv
@System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2
@System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus
@System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@LStrFromWChar$qqrr27System@%AnsiStringT$us$i0$%bus
@System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@LStrFromPWCharLen$qqrr27System@%AnsiStringT$us$i0$%pbius
@System@@LStrClr$qqrpv
@System@@UStrClr$qqrpv
@System@@HandleFinally$qqrv
@System@TObject@MethodName$qqrpv
@System@TObject@MethodAddress$qqrx20System@UnicodeString
@System@TObject@MethodAddress$qqrrx28System@%SmallString$iuc$255%
@System@TObject@Dispatch$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@ClassInfo$qqrv
@System@TObject@InheritsFrom$qqrp17System@TMetaClass
@System@@FindDynaInst$qqrxp14System@TObjects
@System@TObject@UnitScope$qqrv
@System@TObject@UnitName$qqrv
@System@TObject@GetInterfaceTable$qqrv
@System@TObject@GetInterfaceEntry$qqrrx5_GUID
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@InitInstance$qqrpv
@System@TObject@$bdtr$qqrv
@System@TObject@InstanceSize$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassParent$qqrv
@System@TObject@ClassNameIs$qqrx20System@UnicodeString
@System@TObject@QualifiedClassName$qqrv
@System@TObject@ClassName$qqrv
@System@Set8087CW$qqrus
@System@Reset8087CW$qqrv
@System@SetRaiseList$qqrpv
@System@RaiseList$qqrv
@System@IsMemoryManagerSet$qqrv
@System@SetMemoryManager$qqrrx23System@TMemoryManagerEx
@System@GetMemoryManager$qqrr23System@TMemoryManagerEx
@System@DefaultSystemCodePage
@System@IsMultiThread
@System@IsConsole
@System@ExitProc
@System@CmdLine
@System@IsLibrary
@System@MainInstance
@System@ExceptionAcquired
@System@RaiseExceptObjProc
@System@ExceptObjProc
@System@Types@initialization$qqrv
@System@Types@Finalization$qqrv
@System@Uitypes@initialization$qqrv
@System@Uitypes@Finalization$qqrv
@System@Sysconst@initialization$qqrv
@System@Sysconst@Finalization$qqrv
@System@Internal@Excutils@initialization$qqrv
@System@Internal@Excutils@Finalization$qqrv
@System@Rtlconsts@initialization$qqrv
@System@Rtlconsts@Finalization$qqrv
@System@Character@initialization$qqrv
@System@Character@Finalization$qqrv
@Winapi@Shfolder@initialization$qqrv
@Winapi@Shfolder@Finalization$qqrv
@Winapi@Imagehlp@initialization$qqrv
@Winapi@Imagehlp@Finalization$qqrv
@System@Sysutils@initialization$qqrv
@System@Sysutils@Finalization$qqrv
@System@Sysutils@TOSVersion@$bcctr$qqrv
@System@Sysutils@TEncoding@$bcdtr$qqrv
@System@Sysutils@TLanguages@$bcdtr$qqrv
@System@Sysutils@Exception@$bcdtr$qqrv
@System@Sysutils@Exception@$bcctr$qqrv
@System@Sysutils@Exception@$bdtr$qqrv
@System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@System@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi
@System@Sysutils@TOSVersion@$bcdtr$qqrv
@System@Sysutils@TEncoding@$bcctr$qqrv
@System@Sysutils@Exception@
@System@Sysutils@TLanguages@$bcctr$qqrv
@System@Math@initialization$qqrv
@System@Math@Finalization$qqrv
@System@Timespan@initialization$qqrv
@System@Timespan@Finalization$qqrv
@System@Timespan@TTimeSpan@$bcctr$qqrv
@System@Timespan@TTimeSpan@$bcdtr$qqrv
@System@Varutils@initialization$qqrv
@System@Varutils@Finalization$qqrv
@System@Variants@initialization$qqrv
@System@Variants@Finalization$qqrv
@System@Strutils@initialization$qqrv
@System@Strutils@Finalization$qqrv
@System@Ansistrings@initialization$qqrv
@System@Ansistrings@Finalization$qqrv
@System@Rtti@initialization$qqrv
@System@Rtti@Finalization$qqrv
@System@Typinfo@initialization$qqrv
@System@Typinfo@Finalization$qqrv
@System@Generics@Defaults@initialization$qqrv
@System@Generics@Defaults@Finalization$qqrv
@System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TIStringComparer@$bcctr$qqrv
@System@Generics@Defaults@TStringComparer@$bcctr$qqrv
@System@Diagnostics@initialization$qqrv
@System@Diagnostics@Finalization$qqrv
@System@Syncobjs@initialization$qqrv
@System@Syncobjs@Finalization$qqrv
@System@Syncobjs@TInterlocked@Increment$qqrri
@System@Generics@Collections@initialization$qqrv
@System@Generics@Collections@Finalization$qqrv
@System@Classes@initialization$qqrv
@System@Classes@Finalization$qqrv
@System@Classes@TObserverMapping@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcctr$qqrv
@System@Classes@TBinaryWriter@$bcdtr$qqrv
@System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@System@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver%
@System@Classes@TComponent@CanObserve$qqrxi
@System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction
@System@Classes@TComponent@GetObservers$qqrv
@System@Classes@TComponent@$bcctr$qqrv
@System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter
@System@Classes@TComponent@$bdtr$qqrv
@System@Classes@TThread@$bcdtr$qqrv
@System@Classes@TThread@$bcctr$qqrv
@System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent
@System@Classes@TPersistent@$bdtr$qqrv
@System@Classes@TBinaryWriter@$bcctr$qqrv
@System@Classes@TComponent@$bcdtr$qqrv
@System@Classes@TObserverMapping@$bcctr$qqrv
@System@Uiconsts@initialization$qqrv
@System@Uiconsts@Finalization$qqrv
@System@Actions@initialization$qqrv
@System@Actions@Finalization$qqrv
@System@Win@Comconst@initialization$qqrv
@System@Win@Comconst@Finalization$qqrv
@System@Win@Comobj@initialization$qqrv
@System@Win@Comobj@Finalization$qqrv
@System@Win@Comobj@TComServerObject@$bcctr$qqrv
@System@Win@Comobj@TComServerObject@$bcdtr$qqrv
@System@Contnrs@initialization$qqrv
@System@Contnrs@Finalization$qqrv
@System@Dateutils@initialization$qqrv
@System@Dateutils@Finalization$qqrv
@System@Dateutils@TTimeZone@$bcdtr$qqrv
@System@Dateutils@TTimeZone@$bcctr$qqrv
@System@Masks@initialization$qqrv
@System@Masks@Finalization$qqrv
@System@Ioutils@initialization$qqrv
@System@Ioutils@Finalization$qqrv
@System@Ioutils@TPath@$bcctr$qqrv
@System@Ioutils@TPath@$bcdtr$qqrv
@System@Inifiles@initialization$qqrv
@System@Inifiles@Finalization$qqrv
@System@Win@Registry@initialization$qqrv
@System@Win@Registry@Finalization$qqrv
@System@Win@Registry@TRegistry@$bcctr$qqrv
@System@Win@Registry@TRegistry@$bcdtr$qqrv
@System@Maskutils@initialization$qqrv
@System@Maskutils@Finalization$qqrv
@System@Helpintfs@initialization$qqrv
@System@Helpintfs@Finalization$qqrv
@Winapi@Msxmlintf@initialization$qqrv
@Winapi@Msxmlintf@Finalization$qqrv
@Winapi@Uxtheme@initialization$qqrv
@Winapi@Uxtheme@Finalization$qqrv
@Winapi@Flatsb@initialization$qqrv
@Winapi@Flatsb@Finalization$qqrv
@Winapi@Multimon@initialization$qqrv
@Winapi@Multimon@Finalization$qqrv
@System@Widestrutils@initialization$qqrv
@System@Widestrutils@Finalization$qqrv
@System@Zlib@initialization$qqrv
@System@Zlib@Finalization$qqrv
@Winapi@Wincodec@initialization$qqrv
@Winapi@Wincodec@Finalization$qqrv
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetCurrentThreadId
GetEnvironmentStrings
GetFileAttributesA
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetUserDefaultLCID
GetVersion
GetVersionExA
GetVersionExW
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualQuery
WideCharToMultiByte
WriteFile
user32
EnumThreadWindows
MessageBoxA
wsprintfA
vmprotectsdk32
VMProtectBegin
VMProtectDecryptStringA
VMProtectEnd
@@Unit1@Finalize
@@Unit1@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook
Name
.text
Size
153KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
23KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect/Code Markers/BCB/Project1.exe.vmp
- SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
- MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
- SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
- SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
- TLSH T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/BCB/Project1.res
- SHA256 d979175c5d319a18b6869aab66e7f036702c3b12ae261caeffb5781c51092f50
- MD5 04b3152f3bbd6f31b02a6d5c33888108
- SHA1 c5f4faa609c5ba129157e25a9abf4d096a46c574
- SHA512 daa0bc4fc6a0ad9b65b94a629cc9c54df74874af7956a20077fdb666eff4edfcca04f9ec03c557dc1f47e03620ad078d5c418a716324b8a1cb50515f93d9d886
- TLSH T1EF116D1AB324E869F511D23E9507439B486BDC708B198ACB75623EEE2D317C04DB62D8
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/BCB/Unit1.cpp
- SHA256 7dc64405f2554a75d1f33cb5686c2b9e409c50feddb08f07f9536f8ffa6cbd3e
- MD5 9a10a95c8143636fb07fe30d1016f95d
- SHA1 ecc3c6e91209b174d377c8e4e49c49ca592535ef
- SHA512 4ca557b71ccf88193dc7ccda0eb6a99a33df8f1b374fefe17c503ea1a09e85c6b4d3806f95d50aba158982a3f2127d5e6a2a054527807a75e6f39d61f580aaff
- TLSH T1BE114C145E0D50228270E5BC67128C28DA6C90301BF7E972B19F55C66FD458AA75FB43
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/BCB/Unit1.dfm
- SHA256 b0484b042439b2d65940bb249f6ed47d57f7bcbe1ca744899312da19e43f373c
- MD5 b304338a6585400ac91169dc87ed13aa
- SHA1 02254a098fb3f58b8e03bf4c8ca118f1a95ea5fe
- SHA512 5cb9d7a2ed4fc54bd0f0ef55bbae35e0a49759c2ef32da64d0f65cc5ec3f93dbfcb688fe115b3de392544cd5619e6e0de26cbffa94a92bff991aa015b7cf3bb8
- TLSH T17211AB7C5A28A21828B3E51345AB1D4CE4662D230107AC2177D3CCDCBFF5D16F7A6752
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/BCB/Unit1.h
- SHA256 aabf2dc07320d8a344276ad446541291936d413051f12e5bb41e4edeb0c5f2db
- MD5 78566d57e206237ed2ce4eb92df559ef
- SHA1 54f149dd0f9a562e2d62e0be2625e980e2223909
- SHA512 ac647425a83494d6434f7cd718da6e846710fe806153e33405520ad46d83076da154d253dde393f2d6d66b8afab0567893c31349cf05607751ec8f952657ee91
- TLSH T16E1124785FAC8171C031F13AD7039422E3AFE1B557D6A826707E14E65F90142238F799
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/BCB/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/BCB/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
arhajrhakerhekrwerj2453
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/BCB/VMProtectSDK32.lib
- SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
- MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
- SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
- SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
- SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
- TLSH T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Delphi/Project1.dof
- SHA256 fcca360abf95da036c46aca01f7180bde9d7d85c929d020a5285a274c4822bbb
- MD5 7385f06f0dfd8a50b23d9c0dca0265e0
- SHA1 8708de14e394b42d8c04eba66916d2ddac502c69
- SHA512 d2534114b628c98f0c0f0c2af9f6ea9a71392d933a45dda411b21225069dcf670977928150c56dc47cda4b65528e4413b6115af552fe6e4f9b13f633e71f791a
- MD5 SHA1 SHA512
VMProtect/Code Markers/Delphi/Project1.dpr
- SHA256 3859798d9f2b6040c2c83de7c3dc2a2fa8710fdde49ce5bb13d5122e2a1b55b1
- MD5 d843a7f42f9ff957481d274f4af11235
- SHA1 51ac86a1545fdc2726134fc4bc178b29e599105d
- SHA512 4bcbdf611902c319cdd93cd3b32a654b076d26f59d8244ddad172337fe8a1c1e370e7e06bb9e4f9d54fef013bafc8160cd2d622b2565690da747f08f2a7ed191
- TLSH T1DEC012DB27ED80C3BAF665B6350E44806462C53C4C81535935B5D8664405759CB13365
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Delphi/Project1.exe
- IMPHASH 1e7575186edecf060e4585f8bc74203f
- SHA256 a14c1e75ce36821ecd80e4525c888c9d58e80a23a8a5f6ebe9923f6a33d93e7d
- MD5 fcdd67939f856f8bcfc404bb5f706ec7
- SHA1 758d14e6d838e12d2c1e52f65594a91dbe744f4b
- SHA512 18be594c08513e005840d9af00174edb021fda635e5331528310f72fcfce20938edef99965ccf0039ec0283500239642bb6ff6809ef797c79f6c4c5ba1a6aff2
- SSDEEP 24576:FiRfWQHP2VPwHgzDe/EMdwBmSPk96vBL/5YSnrnS:AWHPISVZ9YSrnS
- TLSH T151156C13B392173FC136163AC96792A05C3B7A102E965856DFF4CD8C1FF92A12C3AA57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
769096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey
user32
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TryEnterCriticalSection
SwitchToThread
SuspendThread
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep
msimg32
AlphaBlend
gdi32
UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
Chord
BitBlt
Arc
AbortDoc
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
IsEqualGUID
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
vmprotectsdk32
VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin
Name
.text
Size
741KB
Virtual Size
741KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
20KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
1024B
Virtual Size
806B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
60B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect/Code Markers/Delphi/Project1.exe.vmp
- SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
- MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
- SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
- SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
- TLSH T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Delphi/Project1.res
- SHA256 649865f23f2dad52f1426f68a62cd6325e1d6956d2a24e94e7955d35c9c0494b
- MD5 0449e63e988a4abab210048b5717d71c
- SHA1 42c36a7f1e04bb4c55bc5e9483e9fde64cffbbff
- SHA512 f7be79e58b20c661021ef715b7d96fcd5b064ef9ffe13992983765b507717bb6586efc40cf165fd885fe187b77a6cbdcdb82c17ccfa0d0cd1378eea5fc1dd7fa
- TLSH T1291181266384E198C00A43B0D4439EDC2171E869AD3CA9D7E8F2FEFF7E2451535039B4
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Delphi/Unit1.dfm
- SHA256 e308c46a00ea2a7bbb7e0c03a0b36f72fceebf4f4410654d63e28923c1508974
- MD5 9baba524abcbd986ad6d445cd08c25d1
- SHA1 5551ef1648ddc984f72fd2be459c2a557f8da45b
- SHA512 9d4601c3a61750a73b79cd5a3f5d6a1f15a0304858d875f61e8e9fa1b5442fa2cdd8c24e487f0e46b367d41195a72d74ff8101de5466d98a5abe18eeb4076e3f
- TLSH T13811AB7C5A28A21418B3E50349AB1D4CE46529230107AC2177D3CCDCBFF1D16F7A6752
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Delphi/Unit1.pas
- SHA256 ce1885abe0628e592850627757dbc96bcbe72fc64ee35059689def84c2c6898c
- MD5 7f072fffb0ebdafa0fc16a4a86359bbd
- SHA1 ad9ce2cd69e1015ea101af794f5b9d5468077605
- SHA512 c6ecb7af017102646a1388fb82d8385117dc7f0507551db26888b68af19961f9e54e42598245468dd5b5bbb655efe666e54be2b72b0488d862acbe8c89d6be8c
- TLSH T11B01F1905BDBB51E4472D1BCB7174C43D9A8C02113AEEA8170A3A6C71F99C49575139F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Delphi/VMProtectSDK.pas
- SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
- MD5 97a96877fc2c184b0e73e85529b34822
- SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
- SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
- SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
- TLSH T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Delphi/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/Free Pascal/Project1
- SHA256 d1951f724d2aa423bb2c29eae92069b676b33a7d0e9d371a45e1d942c4a28a8d
- MD5 0f748d65e665cb249408a25694f1c016
- SHA1 c31e8b9ef31986ccc0ea19abf337d3fe7b82f479
- SHA512 2da9405d516aee9a9bdd8372013ad4b1dbc4f7b031703673b684e97194f4a1e1c5afa1c2bb84e5c339f839dd4ad71caaa60604742908d1ae74f729f1b5d5736b
- SSDEEP 6144:oRy5S3+kZrUHMNsP96a2FAtzojOGV2Spqjj/Ig7t/H9WIBR8PEZIPCJRK:oRy5S9ZrUHMNY9sFAtcaG8jV5/RBR8PP
- TLSH T1FC743919FE43917FCA2340F982774A5A9B319135203096A7B7D8DE3DBE79D82B42CB05
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Free Pascal/Project1.exe
- IMPHASH 31c9cdd1525221040f7f273b9a6216ed
- SHA256 afda096738c0646e01a2b3d2c000fe48b80376ce8464be660764ed2004ba5de3
- MD5 e524da8fbf47a18fbae7ba94943eb451
- SHA1 3aae8e31b4f7f14cd607b48291546d1a3233aff2
- SHA512 c0641d9f1a1778095bfbd6463bc35caeaa3d3bb7cc4350d3853b40c7d72ef13e969ec4627319e25d05bf22cc83443010b45153721118261ba2b3c12634e078f4
- SSDEEP 768:aivdTUc6NCnV/mfVKo6fuTy005j5y29zwB8p5UzNve9a+ZxeN/X3GRsYjY2zgy0p:JnwfH0uGV5MNy0l/vv
- TLSH T105734D92FBC187BDCA465EB54B06C1A7A720F2313C35C16B72D80B2F96FA0D2557A781
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64128
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
vmprotectsdk32
VMProtectBegin
VMProtectDecryptStringA
VMProtectEnd
kernel32
CloseHandle
CompareStringA
CompareStringW
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FindResourceA
FindResourceExA
FormatMessageA
FreeLibrary
FreeResource
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriority
GetUserDefaultLCID
GetVersionExA
GetWindowsDirectoryA
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LocalAlloc
LocalFree
LockResource
MultiByteToWideChar
ReadFile
ReadProcessMemory
ResetEvent
ResumeThread
SetEvent
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
WaitForSingleObject
WideCharToMultiByte
WriteFile
oleaut32
SysAllocStringLen
SysFreeString
SysReAllocStringLen
user32
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharUpperA
CharUpperBuffA
CharUpperBuffW
DialogBoxParamA
EndDialog
GetDlgItem
GetDlgItemTextA
GetSystemMetrics
MessageBeep
MessageBoxA
SetFocus
Name
.text
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
4B
Characteristics
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
VMProtect/Code Markers/Free Pascal/Project1.pas
- SHA256 2d27a9fbc0a15579f16e6f0cc224ba2445d732631a52aaa4365b08d54003bbe2
- MD5 382555cff2f9e63e87a54ef6e32e26b0
- SHA1 88ad854fa791a993eba1ad72f877e582a7e978bb
- SHA512 7299dbc0a4f173b0f5b995275c22eb73adee486aa7b5bbec4fb4e33e9c10942aebc37cb09a1dcba9b58aafe612124b81dc0b160ef964e8cd69c004cd33217ce0
- TLSH T1C0310F60CD922ABAC570856837EEDC47CD3583039B75A2A4F55EA2E11F38CDC6510ECE
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Free Pascal/Resource.rc
- SHA256 baf821685adf4b9c75bd41460bd9622a665c83d9d53ac6b40d41bab4ea08cf07
- MD5 ce2b6ee2db483e22c8a923677f2a6f17
- SHA1 a76e9c9a9e1f89db8f9a298199044a8e5531bbec
- SHA512 f01a8d31c5a673d7317663e65fe167901458a682e42d76203b243abd7c7b04aa23e5e494002b60f6bb00615f43bfa4b27e7bcba630256672dc79ee6eb2b7042c
- TLSH T19AE07D21D7413D1445C4F1E445AA9CE3B5D8E4A31F788B05B3EC001A17BBDC886B4133
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Free Pascal/Resource.res
- SHA256 d07d83ad978cc0ed6a882d46d7be6093b5333c4243dda78e2c08aa156cd987bc
- MD5 eda0430286b41b50ae8c55b2971a8873
- SHA1 2a2b8ad34e4ff7f26240c851a53bb08e1954f139
- SHA512 6c892b63e0c31dad601707e4f52bb3263594f855e669f4b99857d77dd0a903aefd41c1a63f48d9fbcf0bb77e48361cbccd8554f893a4666ff0cc71a45080e8da
- TLSH T176E02EA093B0C000D4738E788E72ABA23C6238010F30820A2620374F9032A44EA39300
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Free Pascal/VMProtectSDK.pas
- SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
- MD5 97a96877fc2c184b0e73e85529b34822
- SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
- SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
- SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
- TLSH T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Free Pascal/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/Free Pascal/libVMProtectSDK.dylib
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Free Pascal/makeit.bat
- SHA256 2062ace492beeb520c23bc3617c66af0b3b822ad3c6c1baf4e6883ad0a7f879f
- MD5 7c59610d2f4611980913211ad36375af
- SHA1 ca86a95bf4bf72407f6ab2a15933402a451036c6
- SHA512 c41a265d9713807c3a1abe1d9c7b66de70d27ed847b7cd5e3d1eb1edb972b3d3bfc47f9f570db15864db55ad315a5bc60b1c599a69289a70c7368cf4e7a813bc
- TLSH T146B012052D0D63C0FDCFCF6D887788405192F26F827083DA2511E2282D11380047899F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Free Pascal/makeit.sh
- SHA256 1fb56c36d9d46a8cdad55d79839b9ac59a86d15df518800208957afb8a51efe4
- MD5 49f4fda335793090271c10668c2da780
- SHA1 e851f9b0d4bf6bbc5a8269cbe6d99938fbc271b7
- SHA512 29e5ef7618375c8284ca217642b9ede6d57a273882fcacefa39104603778124512ee8e82220326db5fb00ae614f07ed20549bbaca9019d271dfde28172d11243
- TLSH T147A002442B88BB017BDEA710D156DE64F257355C6F228D7C10C9D29D24133819056597
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/GCC/Project1
- SHA256 6bd7626d74b11df5a7b7b49b1a7a08ebe6f21b870c4493d50d53eba8036b879e
- MD5 d9a7d8095dc2e48c9827a498debb9d9a
- SHA1 ee7931c457468adb3cafd8f31b70753ff217174e
- SHA512 2ec7468348f93c93a859bef5188e32377644c2fe411d5feea260f9c44590545935c1728e263bc1c06a2ed8457951bb03f1d7e3a40103d73be0585b3437f94b68
- SSDEEP 48:xH35L/ifdnpgS4zgFjf1j7hQvTc1IkjaFET:xH3M0kFjff1njaq
- TLSH T16B02CE42A79C0A26D01CC778C0DA4FC6B261F5510EA69B0B1681D21C1F5B78E6975F4F
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/GCC/Project1.cpp
- SHA256 2ce737813b173564e00438e51221c70c1c5fb0d6d8834db74b16fab342c9502b
- MD5 fcda868f2c07bad3618322a3b69e0337
- SHA1 cc448dcd2a014d1f58ae70633d3d1cae207b3047
- SHA512 fffd4d6a5e77fe9e0a0c817948170ff0d5f5380dd48bfa9d0349c64c560d96f1ec600ef0d8e0078629c3548d75343d1424449e254c4440df0f4c60b21ffc243d
- TLSH T1BEF05C54365C305BD261C1D82324CC28E34CD01322B6D6A2756320C52B66C4D86DA54B
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/GCC/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/GCC/libVMProtectSDK.dylib
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/GCC/makeit.sh
- SHA256 8e19ce0f8d045ca709ac029631bd913c02ad5b3e95d9d792cd6d18a88eb4a0d2
- MD5 f6a42f92cb10385709844a3cc9a03e65
- SHA1 c3f626c5252457fcfffa93d82583a41bb9924a68
- SHA512 7dfca41b6ed04b63219c73ae947867dc90c8935b8ae82018ba12275367644130ea4a07aa0c7b285fee0530554656dd43407f5c8a35a937897ae233a4470c6665
- TLSH T15BE02B241917837BB6DD9C8311204C70F78303E54EB0AEABD41AD455422D3470959D2A
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Lazarus/VMProtectSDK.pas
- SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
- MD5 97a96877fc2c184b0e73e85529b34822
- SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
- SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
- SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
- TLSH T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Lazarus/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/Lazarus/libVMProtectSDK.dylib
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Lazarus/project1
- SHA256 ae0a22792b62dee33cc9328ff471b549b0967b33951cc385b43ad13c1582e0a6
- MD5 4c4d34d37ff8ba71180424a7750ca87b
- SHA1 34a841514f85db82f0ad2603a54811c115b1625d
- SHA512 f7d41e00f34e87690e08c7e714ec35dd8dfa33cd2f4163638715686d24a2176c0ab816a3561b1d57baa2804e9e3e5dee50084689b179bae1f1597e5405eb66f3
- SSDEEP 49152:MT1N0jDMi6MsYwdHunMk2zwRLK/yxpieGFvQUS3NCBvsGp+SJScZggFMnap+:ST0jD/6MsYwR8MkvLGyxFavlM
- TLSH T13A163C17B723C1ABCC331373855B26864A20D7157931AAAB72989DFC7F71E82782E705
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Lazarus/project1.app/Contents/Info.plist
- SHA256 997696a737a6a2f73dd415bc8c2403835f5473cccddce269d52f689bf028d7dc
- MD5 070d580bc05bb0e96da27baa0e69bec8
- SHA1 19bb4f96b99fa8eefacc21a83d9d06fcd219ab23
- SHA512 5ef2eafb05ec8cfd26a58a6b34abec80979fb91e88387d7c51c1a8361fe628bfc6353006c608c855a20965d69d3db26ba46425b210f5361aac975a2f0856aadf
- TLSH T1C7217F6411D0E5190AB21BE7B39091598998F1CE9C7319F5FCCF6A431B2AE2617B3D12
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Lazarus/project1.app/Contents/MacOS/project1
- SHA256 248b21893a6d1774c26cb7f80bfd4a34c9a53a9a6f9dea439e1f0128cb54b71c
- MD5 3b9a0cd3371451af3575b481117bd135
- SHA1 ebb3fae4358017336e58997b09f19a8dee236646
- SHA512 301205fd69d35f635986b59b0bf9fa2e9f740e7bb57a459818887a8c64068896f0df9cb7e5cc078e8bb3fa3eb626d9c92206413cd229333b7c8825b59c1e438b
- TLSH T116112230A020322CB280008C8F03CF88CF00CCB33A00AEE030BCC0323B0B0002CC0082
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Lazarus/project1.app/Contents/PkgInfo
- SHA256 c89b70392a33d313ca5ea1b45df1e368f86fdb83f653169d20ed84626d267373
- MD5 3a332c31b8563c20caf0c6fe37c892b2
- SHA1 836f6650f493f35a73d3f8d0780b3d5dd88342b1
- SHA512 b0fc62807594b7ab404e783301e7c975ad43933984783e2d922e8d5cfd99d5e3a180eed0c487bd1cc965360c5dd71c6765f68f780dd2f5a25766459c204a8219
- MD5 SHA1 SHA512
VMProtect/Code Markers/Lazarus/project1.exe
- IMPHASH e78a5d103f3c1ceff54c4588d6a9ed5a
- SHA256 864a8b0953fd38a64aa17123bf9e6aae62be534289dabe3a613959010485f44f
- MD5 617d5d121653b7d87d30d32197e07a85
- SHA1 b54a37291a8652043f6c3a817f724db2f1b19f64
- SHA512 bb363dd86a438b431339440d006873896774a6eceb1ab7c5d3061951f00b354509680cf64b0c47d7b6acb731ab16d2016a0d37d8d215553d714e53a35c83d6ca
- SSDEEP 49152:z7+3sUVt35XSsjXFxScIhTNKCbY072iWvQh:f+3sUVNXacIh4aV72iFh
- TLSH T198751C167722C11BCC632BF2874E468556A4E7643C30E9D731DC5EAEBB70B863E2A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1314096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
vmprotectsdk32
VMProtectBegin
VMProtectDecryptStringA
VMProtectEnd
comctl32
ImageList_Add
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_GetImageCount
ImageList_Remove
ImageList_Replace
ImageList_SetImageCount
InitCommonControls
gdi32
Arc
BitBlt
Chord
CombineRgn
CreateBitmap
CreateBrushIndirect
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateDIBitmap
CreateEllipticRgn
CreateFontIndirectA
CreateFontIndirectW
CreatePatternBrush
CreatePen
CreatePenIndirect
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateSolidBrush
DPtoLP
DeleteDC
DeleteObject
Ellipse
EnumFontFamiliesA
EnumFontFamiliesExA
EnumFontFamiliesExW
ExcludeClipRect
ExtCreatePen
ExtCreateRegion
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
FillRgn
GetBitmapBits
GetBkColor
GetCharABCWidthsA
GetClipBox
GetClipRgn
GetCurrentObject
GetDCOrgEx
GetDIBits
GetDeviceCaps
GetMapMode
GetObjectA
GetObjectType
GetObjectW
GetPixel
GetROP2
GetRandomRgn
GetRgnBox
GetStockObject
GetTextAlign
GetTextColor
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextMetricsA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LPtoDP
LineTo
MaskBlt
MoveToEx
OffsetRgn
OffsetViewportOrgEx
PatBlt
Pie
PolyBezier
Polygon
Polyline
PtInRegion
RealizePalette
RectVisible
Rectangle
RestoreDC
RoundRect
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetArcDirection
SetBkColor
SetBkMode
SetBrushOrgEx
SetMapMode
SetPixel
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutW
kernel32
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateDirectoryW
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
EnumCalendarInfoA
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
ExitProcess
ExitThread
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FindResourceA
FindResourceExA
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
FreeResource
GetACP
GetCommandLineA
GetConsoleMode
GetConsoleOutputCP
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetThreadLocale
GetThreadPriority
GetTickCount
GetUserDefaultLCID
GetVersionExA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MoveFileA
MoveFileW
MulDiv
MultiByteToWideChar
PeekNamedPipe
ReadFile
ReadProcessMemory
RemoveDirectoryA
RemoveDirectoryW
ResetEvent
ResumeThread
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEndOfFile
SetEvent
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VirtualFree
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
ole32
OleInitialize
OleUninitialize
oleaut32
SafeArrayAccessData
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayRedim
SafeArrayUnaccessData
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VariantChangeTypeEx
VariantClear
VariantCopy
VariantInit
shell32
DragAcceptFiles
DragFinish
DragQueryFileA
DragQueryFileW
user32
AdjustWindowRectEx
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcA
CallWindowProcW
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharToOemA
CharUpperA
CharUpperBuffA
CharUpperBuffW
ChildWindowFromPointEx
ClientToScreen
CloseClipboard
CopyImage
CountClipboardFormats
CreateCaret
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefWindowProcA
DefWindowProcW
DeleteMenu
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawEdge
DrawFocusRect
DrawFrameControl
DrawMenuBar
DrawStateA
DrawStateW
DrawTextA
DrawTextW
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndPaint
EnumClipboardFormats
EnumPropsA
EnumThreadWindows
FillRect
FrameRect
GetActiveWindow
GetCapture
GetCaretPos
GetClassInfoA
GetClassInfoW
GetClassNameA
GetClientRect
GetClipboardData
GetClipboardFormatNameA
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetMenu
GetMenuItemCount
GetMenuItemInfoA
GetParent
GetPropA
GetScrollInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowDC
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HideCaret
InflateRect
InsertMenuItemA
IntersectRect
InvalidateRect
InvalidateRgn
IsClipboardFormatAvailable
IsIconic
IsMenu
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorA
LoadIconA
LoadImageA
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
MsgWaitForMultipleObjects
OemToCharA
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterClassW
RegisterClipboardFormatA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
ScrollWindowEx
SendMessageA
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClassLongA
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoA
SetParent
SetPropA
SetRect
SetScrollInfo
SetSysColors
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SystemParametersInfoA
TrackPopupMenuEx
TranslateMessage
UnregisterClassA
UnregisterClassW
UpdateWindow
WindowFromDC
WindowFromPoint
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
303KB
Virtual Size
303KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
4B
Characteristics
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
VMProtect/Code Markers/Lazarus/project1.exe.vmp
- SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
- MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
- SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
- SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
- TLSH T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Lazarus/project1.lpi
- SHA256 52d6481c992384f523e3191ebe9d4ea224af31d09177ffcde6cf56775c431257
- MD5 e39837b19e1bc6b091ef06bcd5ba3fe2
- SHA1 615686e071b902d70c67da9d934e4a1f0b8021aa
- SHA512 10bcd876d5a7903611c323ad6dafa3aba160152b36b028cbc9a3ef62553109e4fa53419004fbae91066835d350ccb1dd8fe222c22e463a79e1b428d7edcdbd26
- TLSH T1C2615825A1C4CF2267B24E50B6514C62FE6DC3C703065862F44DB24B9FF7D6A10B7539
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Lazarus/project1.lpr
- SHA256 6e235ec419611d1a9873d5756879badbd333fb4899f19a955d2bd66015f8849d
- MD5 f5ecac8124592980459bb503fa28609a
- SHA1 3087569d0e9a478212d7e17af22f6925d0b268fe
- SHA512 cb9f7167916889aac53dc4d7d43d557e29c6baa5465855358c688050748ce831d67ba40490d0394c44061e99401debb56f07cefc56b1d1dfa74436c0de517d71
- TLSH T1A3E020F75BFF80C2B97764F1120DD442289A523C0D4571C83964C05645095945613AB9
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Lazarus/unit1.lfm
- SHA256 f3f7b7f0b7aa902a8693199472055d447e62074f38fe8535f2d454c68b4d4e21
- MD5 90cc94af0020da28d493e7e3df93f252
- SHA1 96e5ba1491f0cee91c8e289737d3af0af23cc052
- SHA512 53416e5a0718ca25784de35ac3c7eaf46a129499c9d82e7cdd4b434cbd4f43912ae9a9929d9b4e126d9cd5da471dba288d04aef016bc9b6ecaa35464d64fb24e
- TLSH T1C301AB7C1524A2195CB2D217A40E0D4CE87A69230103A82577C3DC99AFF5D16F791782
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Lazarus/unit1.lrs
- SHA256 07b139f6319b9ddff5e8f9a6cde42c45fa25682731c3ad536c11b7495e25ce6a
- MD5 e05a41823a6f9274e292f0f314b99bac
- SHA1 d778f18f255e6b57ecb7d0bd74edf23d19a0f83c
- SHA512 4d937ce4e899d5e038da404de2f4a0d7554f9e8a6b26210b7e5919f1050c09cbec28903070c69ebbf90ae1a0f733cded7af7ced350b01b2e5d9ae1fa6e353773
- TLSH T1FF110E6A3E057111C224F2AAAB8F0C9F8A27442645D7A8A5AE92241BC9B310C94726F1
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Lazarus/unit1.pas
- SHA256 805ba8ea754e6397852618ccc5d918c2b7ff13aeb2d619d22c442193c8ce4479
- MD5 d4b210eb6015591a5ba5401d7f9ff88b
- SHA1 8737c36033188385c8418a0bc0364b636a5a6bfd
- SHA512 e06eb591347101ac8c8ab998bc343695c62d55ea5bb8fde130f517e7fce63e0d61ad0d26056b788c96c5e1760ecbe8cb6042b414699e260828155549f2b1d0a0
- TLSH T1D9110C505B9FA41B4132A1A8B6178C03EEA4C026169BEE81309759C20F99C4D1661B8F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MASM/Project1.asm
- SHA256 14aeca4fc84a458acad8dfdf17dec3225f1c5f643e4fdfe01f83b3b322f2c527
- MD5 6512c773a2e231cd33de8b0d8841dc61
- SHA1 a75cc0a66296d297f357f3d1688afe5f49410999
- SHA512 bf47017245efa19a79d6279055bdc45efd221cc92ec610a1c1ec49baeb33493e9be88f50baa255744ff6045478d8d154f111ceb5dac93b3b6175ca2b4c99fdb2
- TLSH T1C5515212851B051694F6B6023D536C0EE756A1237F71CF14390E8A911FB25AC9F237CF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MASM/Project1.exe
- IMPHASH 8fbba78ee3fc992258b0d48632a5a024
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA
kernel32
MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc
vmprotectsdk32
VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin
Name
.text
Size
1024B
Virtual Size
714B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
502B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=1, productName=Unmarked objects,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=19, version=8078,
count=2, id=18, version=8444,
VMProtect/Code Markers/MASM/Project1.exe.vmp
- SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
- MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
- SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
- SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
- TLSH T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MASM/Project1.inc
- SHA256 16bd1d6c40abc4bce77a50c3c1dea815aa3b424598fc49598470e84408427224
- MD5 1ac1b09cfc5940d3794233a644d47f14
- SHA1 59b3a3ee62bd1722d3c1967276563d5ff8c089f3
- SHA512 c07547599daeede899be8d9275252505a993b15f933714196fd5dba38809f50e7d77b1ed2713586eaa272acd1da2d9a269fd7d96a7e58fe23082af15b91f984e
- SSDEEP 192:Q4cqq9C1FchpceCzKEMyAbBeCUdPS3EE0IvCjs:7PKDCY
- TLSH T1B5E1BD0BED4D11543B35E5A13EBEA50BC39E201B3E87484A391C2766FF35689E39F618
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/MASM/VMProtectSDK.inc
- SHA256 9d41f7bf8f220e721e34f54665db9b63caca9ea00fc650f81492736a196f731e
- MD5 a8c48a4a96b59b8bb464223cc5a7c66f
- SHA1 19c91906b42228e7c03c872fc3e2ceca2ed73658
- SHA512 121b00dbc539a9597235e7b44eb7aeb773daaa06e19cf48a44aa0ff935dba2e5cd1de5ac7585696744a9ea06918e775f649fbed32c01fa862d4cb112fe08dffe
- TLSH T1B44112068509768FC0A345B6BAA5AC50BE9BF91113FCCA6B60E50803134752CE7BDF9B
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MASM/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/MASM/VMProtectSDK32.lib
- SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
- MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
- SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
- SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
- SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
- TLSH T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/MASM/VMProtectSDK64.dll
- IMPHASH 1851ff453adce0cef5274e320d5bed3c
- SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
- MD5 db4f1a1406d292162a3b99d1fbb74822
- SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
- SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
- SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
- TLSH T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
8864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/MASM/VMProtectSDK64.lib
- SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
- MD5 32599fe22a118732b9261e1fcd4f94fc
- SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
- SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
- SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
- TLSH T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/MASM/makeit.bat
- SHA256 655f241e2cfa322de729c415b5c9c23103b240fdc51787155bf68f1dce39b3ce
- MD5 af26b0b102187a1d8e57e5f65ad6286e
- SHA1 40ccf43c0a7589e4d9c263cdf8952779ad77a4b5
- SHA512 66d67b277942995ad9d6397590191519412a47e6e16db5f3bf88c9b280f03febe762af19c5f02cf392d4b07e006eb5a946f25d6d4801e6d82475a4b5fe488bd9
- TLSH T1A6319E56AC5EC2A6BFF4C44AAE1C4542F3031296657D2635F0FA98F7A801391373D50A
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/Project1.cpp
- SHA256 e71347b15cc4f90e4197ba31b778fa59a66a580f9ccb982dea284d59934a10ee
- MD5 22872e8577ad2268418a09cbaa607fc4
- SHA1 4a00c54e043fc9fa75a01b0f6c1637733d1c5dde
- SHA512 2f15be519cf715a7c744ce9e21a0f93c805ab8d9f24702f2ca58d1997e3d030fdd362919058cd3f57fa17a741edea0b4b5fddd609d4442847eefdf650f1f85f4
- TLSH T1A52140406A197C13E7B1028C2FF2DC08E73CA60317B590A9B5CED1E07F3A5958563F8A
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/Project1.sln
- SHA256 f89dbe0fb20eba54f515445145200d66b2f5e0636b03a56b9a9a108b6d93ea1b
- MD5 f6a26b03aba7554a22e98e46ceaa2ef2
- SHA1 ba9716a9dacd27f72a9458c72583b76387b5b973
- SHA512 4729a850471cb5ca36179419eff7a728237be1b64141c35d667d2cc80db1632299dc7b659c3f20301b3f0ec2f7ad58001504c8877e8a88960030e0be585adcac
- TLSH T1C911597D200F6ED2298A6A2FE9FC1DB2BF7353A0C26C393C1494E4499F23614C507487
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/Project1.vcxproj
- SHA256 21ce6f9c53cdfcc4058ecc89675575bb8efd1a392985d21a3afbe0dc20eba37b
- MD5 345471b40019f106e6515794118b4e68
- SHA1 5fe26ccd179ff510f60faab2ce6a612fd37a61ba
- SHA512 9a11f00536b593db03fa27e6e0d80b588f4a8dc7268868dfa6cb028639fc3ae81709d426cfef679743a9c1744fc5a360ff8e6ad6fb2de222b05aaaaa359e0f21
- SSDEEP 96:i0/z2znfNoyCyaL9D20yaL9D24mubAMXAXIDx8yXhkACgqXIO94XhlN:z/zvAXPyXhpqXx4XhL
- TLSH T1D0E1DF59E8C83D0B81B24167D6E76580EE32C3874E55485CF9AEC78B5F731486217F32
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/MSVC/Project1.vcxproj.filters
- SHA256 b2482763a90c183b52efcb988f00f09c130bce48c0d08390a14f434673685896
- MD5 11f2df974c098ef349ccbb0297c4a65f
- SHA1 fa9824c9c7cba95a84ddd7e13c29f44a7b0578b2
- SHA512 cdbdcfc0a6a0deee666acfdb3093e4e033227af7e6d6633978827bdaf4fb1f54882f2b4b8144cc476881d3fe79f9addc2567ff317b481215d260d715a9474799
- TLSH T159213521C8DC3B5C6132592BFB84CD11EF78B2E720D111487AA8E1472BF3208C267A68
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/Resource.rc
- SHA256 21c399050548fe95812764071e85fdd304080065848e64e98df571dfa4e477d4
- MD5 1b246eb62ad0a637c2d80ded070a41d2
- SHA1 55e34bad6ba6d3fb8ecccf26d298ba53711f5d71
- SHA512 fd0e85a2c59f498666de1a0be540a34f20ff1334eddfc534f10baada4b9ead8eea363fc116202cdafee7335d76870a15c778eed2d271f4a025dd631ae4832048
- TLSH T199412362854396338730F0F04C013E2AD264A55F4B624318B24CB5EC97F7A89039C8AE
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/StdAfx.cpp
- SHA256 11042ff34c0838a5bce544cd490e20cc0e22c0647eb3a571736a9e320f9784c9
- MD5 8cf0228461086ffb2b7f766cde8711f9
- SHA1 b1e9434de6306f55e5182a1122718743a3fbb666
- SHA512 0ec379cb99f990d8224f4da833900ed8f7016d3699755834852e2263f7202562b46de9a77a1328f419e72da92597a407e8b37b632ed1050497859a1c65bf8889
- TLSH T1B4E0CD7AD89C55B050D14450B247A587630EF015D76046245509628AE12B6ABEED395F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/StdAfx.h
- SHA256 b9fd80a6f94eb84a2f97cc4658ebdee38038dd6c106b0438f7e69c286b7a3a70
- MD5 bede0c518e62fc0f37579845427a7135
- SHA1 fdfa9301f3e1c41eea64fc0f73d8626084a5eb35
- SHA512 c2e446fdd15c50d6a7cd604c063eae68b224d5ccdc2e414a0c6b378991f957eaee68ddf2f7d9759fc5e7243bb16d08128eb76f39c5e06152a81a50e299a8064d
- TLSH T123012096CCDF5451A01030E9BC492F26B00DF92B1BC842943493ADDDB89AD8C5EE7E5F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/VMProtectSDK32.lib
- SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
- MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
- SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
- SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
- SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
- TLSH T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/MSVC/VMProtectSDK64.lib
- SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
- MD5 32599fe22a118732b9261e1fcd4f94fc
- SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
- SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
- SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
- TLSH T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/MSVC/bin/Project1.exe
- IMPHASH a9dccdf6743a7166d3342a2be5a7ac84
- SHA256 5295cf2336ba6f0f91039aece6aa2a3d3a613887db30200524fedbd2d0099168
- MD5 70c2135f72e3c93411699807852a6749
- SHA1 460f2e2e42e1ac7adcf1837c8b18ca30cb5cedbb
- SHA512 eb0b9673fc3c506ea2e25eb02896ba9346506fbeda30b0965efc8d4e733b4bed9d90b275fd4739b2671ad5973c6e40743be477ee0ade13a4737e2d3812fce6b7
- SSDEEP 768:hWyWgCiQvDJ8Eh3Ovopls9wUED0XnDzm8yXBC:IyhQvFP36Kls9Ox
- TLSH T159F24B1175D38432E1A2693518B1D1B19A7F3D4327B1819F3B8812BE5FB17C19EB83AB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
4853
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
GetModuleHandleA
HeapReAlloc
HeapAlloc
HeapSize
GetStringTypeW
MultiByteToWideChar
LCMapStringW
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
HeapFree
Sleep
IsProcessorFeaturePresent
user32
SetFocus
GetDlgItem
MessageBoxA
DialogBoxParamA
EndDialog
GetDlgItemTextA
vmprotectsdk32
VMProtectDecryptStringA
VMProtectBegin
VMProtectEnd
Name
.text
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
740B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=66, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=76, id=1, productName=Unmarked objects,
count=20, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
VMProtect/Code Markers/MSVC/bin/Project1.exe.vmp
- SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
- MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
- SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
- SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
- TLSH T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MSVC/bin/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/MSVC/bin/VMProtectSDK64.dll
- IMPHASH 1851ff453adce0cef5274e320d5bed3c
- SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
- MD5 db4f1a1406d292162a3b99d1fbb74822
- SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
- SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
- SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
- TLSH T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
8864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/MSVC/resource.h
- SHA256 dcc70d19a9604934fbd5b65be3683145224fcbea46f7cf1ee2dcb1e2ecd17d2e
- MD5 1a93146074e70d4b528c5fb9017c084a
- SHA1 4b8f69493ba4c4d762cc4b79c06a8735ee2f2dd8
- SHA512 6550f7c33e8507c5cec35bd95df8b1cdae4754a53c2e549ccd4971ad4896569ebb1538baa151362bd15c88133c4557aab4a2632122b55c3565a1aa235936af6b
- TLSH T113F02E394CC8D45B5464F0C100555703499CFD6BA959177F73CCA8ECAF2655203EF48E
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/Project1.cpp
- SHA256 e94cc24a1849ce4811f2be0b55424e16fa76aad0e5b0a77f4750fcf2d31dfb95
- MD5 2e296753ec3c9f2a3f2b051eb165530b
- SHA1 2c1e8db2ec9d14790569e0dda1ff45502daa7083
- SHA512 ca05a54dbafa72459f4b851c7109207a007e11b7f4a02e1493ff57651e3849e778c3c5ea11ec019a4c912ba11461c1361ef163710120a8e3eeadbe3ff2c4a741
- TLSH T16B2151446A0A7C17E7B1128C2FF2ED08E738961316B5809975CEC1A07F3A9928522F9B
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/Project1.dev
- SHA256 96085407bde2de31302149e040b478f654c52c961c84ab533aa32d147dc2cd31
- MD5 f3b7ea6d037514bb862439c4c0aa8523
- SHA1 77f198cacf7c6a1f20d04bc646a9ceb5a945a186
- SHA512 074f1af3fc3d72e54d995785530946cf29dcdeac5f68d1294f885360cef7e04c347d514892b6d7f34bb68b94452b20fdacc5195799b897b19e7635b9ce4905a2
- TLSH T18621AC6A8528C1FEE1E972529734B89277E37E6C0DF62C1897C0ACC9AFC1205013E056
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/Project1.exe
- IMPHASH 60cebcec59e5019b6aa223ba1a5c67c5
- SHA256 2097c7152947afcf7c00314be716b2ac549b6013a8e9543e96ebfaa49644d98d
- MD5 74a7af8a2bbfe03a080b0963a1250eeb
- SHA1 61a8ef89d25def1f0fcae6adf24fdbf11076417d
- SHA512 c7b25eeb9cdcc4b447734f80361e5377d720e4127f44011e61c9e012b2447503bb06cbf78acfa23728eb98ab132cf3e227352d1b7f994f5a15de77dfddf91085
- SSDEEP 192:lFHEzcky2wf75YyB634idZcF7pb2zP1fzkM67awraZCDn:abwD51635rL5otracj
- TLSH T1839277E67EE95CC6EA64627CD9B6D6313A3CF5F00B538B13563895325B22E823DD4203
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4672
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atoi
fflush
fprintf
free
malloc
signal
user32
DialogBoxParamA
EndDialog
GetDlgItem
GetDlgItemTextA
MessageBoxA
SetFocus
vmprotectsdk32
VMProtectBegin
VMProtectDecryptStringA
VMProtectEnd
Name
.text
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
304B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
VMProtect/Code Markers/MinGW/Project1.exe.vmp
- SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
- MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
- SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
- SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
- TLSH T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/Project1_private.h
- SHA256 0eae78f2e25eb971777b7afd4bea9ae80b459e0e082a8323263280c8af60a35d
- MD5 488fb1bc0707ff9f3ffb4ebfd8778eaf
- SHA1 a523a4dcfef740a099bd64018cc5ee6e99a4dc35
- SHA512 16b347f674431183f1a7a34943f160632db553a2cb7a6ea167825f80f3654bc643ee0447b556b93dbede457462944f3aa40b9dd0b04217f0014833020843ef83
- TLSH T1DEF0245F0FCA8629133AB483508C25A46488CC332B443CDC7C9C6C5E5CE444A22FBECC
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/Project1_private.rc
- SHA256 54539649c737d2c291d2b33527e1401509ac46ba1c6ee7c7e29daedda0e739ad
- MD5 a4166b3fafab006a8e560a600275df64
- SHA1 fa592cd2b8e6bc945914cc345f4c7467d52e1ae0
- SHA512 945fcb4e344c7cb6aa97b95f4f6cf6ee20ce61e914ff674fef39cf4b2b579083daaee719fc7f430cf82681be02d673ee6938a0863d2512483c87ec9aa12a985f
- TLSH T191B01282466A74A250232B4170195410404B6304F1693C5C7824629DB7214CC114BBDD
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/Resource.rc
- SHA256 37075c42fb9e85ad9302cc945c67611aebcab6572eed36ca5fdb85687ef97361
- MD5 f69022cacde66a7d814bf150c2d8d0e4
- SHA1 d2ff1e6096b3bbcfe69576b2e3f109b2671e0a51
- SHA512 58082773a7b8ae0f9a0ee460955365e83f9531dc3ba8cd7adc4284441b0b0b819d1806d493f32fd47d56bc682daf46a92b28ac9c707d5107d277809658df99c2
- TLSH T1D441F362854356338730F0F05C013E1AD265A55F4B664318B34DB5ED97F7A89039C8AE
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/VMProtectSDK32.a
- SHA256 9178ee81695517887c0c9be31376ab5a56346750551624ae0f5228e0c123bb3c
- MD5 b5564ee16bf952395e66517c054bb580
- SHA1 609e01d7dc825268f192987b484a2a98eac7e7d4
- SHA512 ae405adc10cabb9b7a09968e0fbd018930c3fb842c6586860fdc999fb0e0e311b26167b27e420a53b2bbe802c6dac778fc85265be8c14c5857ad03b25f583342
- SSDEEP 192:/1+6gR0nhWkwpJUOyVjMM1Nh/0hce2+0BRMbG17j:/oR0KEQlw3
- TLSH T1DB9205B2B6931D8BE2B591BD958BDF22273CF0D15A66CB23322C64700BD1D4A3EC554B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/MinGW/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/MinGW/makeit.bat
- SHA256 8202e0c42afdab926173409d347f6683dcc6e24eb0fc8cafdcbec1d267f1a59b
- MD5 76377449a9a7fa8406a77ba802bcb6ef
- SHA1 6ef86e3599e85c6e69aa4e74834d5bad4265d5e4
- SHA512 6e018e97a20070b5e7197cc4309fbaa8c6d7aa5b71c3450c5b66ac73205e1bd7969b15db1ebe6a74e4549213bc28d0fdfd44ce09f6aa642d88c0ba22a97f808d
- TLSH T106C08C6B1628D135F1B07AC320914AA0E0A201288872243CF86E80E533E83020B2BD27
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/MinGW/resource.h
- SHA256 45fa77fbec898a6f70f77315c4faa0c3196b1fedc72a2813e360cfae538cdf46
- MD5 2c07158882fd8b6433e80208d5620ff8
- SHA1 0bec705a56f8f7885ff485a331a72ab5605a84c2
- SHA512 67b1795005ccbb7caef9ed18ce506780546d5eaf9049f3792e82d825669a5cf2bc680f61f767d20af53b20deb061080792f9587603cbc0c96aac1f868181d71a
- TLSH T1E0C092288DC038DEA968F00000BC8302008ADE275EB842A8335D2CC80F8418203FB4CF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Net/App.config
- SHA256 7d9cb382e601cfdbdfac46341b7e84fbe3ae6e40e1634e8bba4ed385d0e0f428
- MD5 87e4fdd106d71ec796e94c3b0ef5fe0d
- SHA1 e119d2d76850064eb4c9a7c64053fefc32a030a4
- SHA512 f26d60d3580bae6b55f4cf5456112373e3754bd5cf91e0ebf03cdce81bb9f46c4f50c93842fff5dd80854a1eb5f26fae6ea11cb7c9c0f7eda07f6888e832341e
- TLSH T192C04C5985ACBD2A9C334F5366408953FFB04392A064110CF05FB7570B3155D465736A
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Net/Form1.Designer.cs
- SHA256 4b634173d4971913e3639d8451c3b515150fdef72c2947c829c56a171e9babd9
- MD5 e5c3b724158ac1a5a17408646841b7e0
- SHA1 d80da058975bee42a1133fee1a63a66f3f0fc0e9
- SHA512 567e2d1da747ee920882588d00a287c8385984c2dbef01699c9c5bdea076f447fc37bb5ac1852f1cca9950608c97f0a193c4dd2b4f1e0a93f6a49b723de68ee7
- TLSH T169518A24325F8A1D7792E0CD8535AAC0EEADCD13E656082F7DE94CBCA267C0543691B3
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Net/Form1.cs
- SHA256 fa5677d5f9bc5f11a9c3c39025228a8a25d17ccc6015f2523d9fda0a4cb359df
- MD5 e997a4f63fad5eabcf374c1ce62883ae
- SHA1 c6cec927defe64f0e8033257e2a7407c008fb00a
- SHA512 e8728528e67530f0ae21ad281afe78e65ed21135f69a2e12f6a9ec1e5680e2311982cd9dcd1de3a10253de17005a031e0cde627b582e8dfb9e7a9c0a7bdc00cd
- TLSH T198117A0533495E5E02D150C56B30AE50BDDDCA22076706A69ED700C9F63BC82532EBC3
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Net/Form1.resx
- SHA256 4363cd7d5b8671c72442ce1a1bfc10d64ebd24b2d718b54bd4fcd025e4967298
- MD5 4eb5913a0e5aa842250f7419538fa230
- SHA1 31fb76e5d9babe97a11fea041081f96ce426107a
- SHA512 846207f9db4c05d2070482c27af72c50b8f423ac1c7efb5266b059f6a41362704e9f5a590e428f4aefd791edd2e21c1b34473361911cbeea2cfcaf741b5bebff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvuFZ:KjrbLPD9sLvIzSvKgIqUyahFZ
- TLSH T149C11245B1C1DD260FB3482DE6523988FBA8923F02356C50B4DCA61F5F72985A6B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Net/Program.cs
- SHA256 0962b639efe2139234bf650aae55c4b1b4881a3d053fcf08a3c727e579ccf025
- MD5 225028ffc190c308e455e928a95c06b9
- SHA1 ccd47a307574ea871e8e63f5ec5dc8afdc9d28de
- SHA512 a31e54d661c15f039d2b9a7c7adf2b7f1284640d340fb503f753e408ecea5061f5631ec569d14fbd29ad264dbf0aef822e8eb3b568fb836178a55bfc56e60e4e
- TLSH T1F9E020E6356ED29C1FD360B7053494C8D6779E2C46BA34A0D455CCB6C416245472D982
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Net/Project1.csproj
- SHA256 c3b2905fb27f390d4f6f4017e5bd93c71005492c9055dc7a9e91190330e1284d
- MD5 d48e788549a320f35dcca26c9bd4bb5f
- SHA1 d664dc10e065d22b1c935f640bfc0ec91cae8739
- SHA512 bcccfde11dbe5eccc58bbb3adcfe32f7b901df0f209d69eeca522c581442adb31ef091a05b0a7b0f7f66590cd2e907bf5b913fc32a268eeb896d62fe81a22c33
- SSDEEP 48:3rWSjNJpu5r9mQfg93HuBQhr14H1xv/14H1BA6B6tH6T6XH1lGpPUtDAomANGReZ:yWnpu5U39lWxgGEsHSiNGReG0kd4L+U
- TLSH T18C812224E6D87AB95370417BA6525D81EF78A3F328510898F6CFE20F1F729192207B77
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Net/Properties/AssemblyInfo.cs
- SHA256 21ec4dad5cf713d62ef3313ef36d6b29a8ba34d4a7f9e00c7b7131c093436b4c
- MD5 244fb549d6ce840d2df5682cf20dd161
- SHA1 deb4b91426cec951612e2931928f54cb473327b2
- SHA512 084c31bed9252f4441b728dbb80d521791a952157b438dbed626387e63c5f51f5396d9ec7d1949e64832978b7067858ea4f46a96c184704b0628d7676abefdea
- TLSH T1D31104AC1642B31ECF0611D3EEA331D8067F736844E95C2569ED3C43F406A34426AE23
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Net/bin/Project1.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 70d72b35874fbf4f06d9899e9fa90fb7db292e8c41dbe5747c22a40ee9053ca7
- MD5 a2fe9367cd01c04ef07c9bf42e35954c
- SHA1 ae98a732f77ef44a8249b3160f57ba95c7189375
- SHA512 ab0f282da62b3288e2258d48dd21b88ea977580085fcc12e8e5c975c09fa542fc5987897d7cadc829e85fd9b8a55870d9a7296e83b167fd95944869f4d0f6b27
- SSDEEP 96:LbvvBrt7hdwFGl5PSuzvCtjDarh6TCMBhlXWNeMzNt:Lbrh2GCMvojAh6TCMBh9WI2
- TLSH T191F1D718B3E48273ECB70B729DE37E800B79F6116CA3C79E5886258F6D637014512753
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12898
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Ivan\Projects\vmpsoft\vmprotect\examples\code markers\Net\obj\Release\Project1.pdb
mscoree
_CorExeMain
Name
.text
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VMProtect/Code Markers/Net/bin/VMProtect.SDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b560d162c060b9ce441a8ab9a4ae9d4e0a8121145bf443789c2d978e5f645f75
- MD5 fb3f3c72e482cd1014dc0b6daf857421
- SHA1 1dc14bc418aa4985dc2cf1621d7cb7c6409da0c5
- SHA512 72f55b33826c75aca5dfb0b991722e83dd910cf36d6199159bcd5bcee078dfc407ee16f0855fd3274b6829a39b37ca722c45dcc28f3994b44543b602e5bf2d87
- SSDEEP 96:XbeBWY8lNW5lleAWbgjaJvbdI8cH4YJDcbNVOz8RpFxrPOPXCr3c7isLtKMHAUYu:ZY8zWUAOgjSjR+JdzwFxrhfMHDn
- TLSH T1A822A712B3E8A15AF5FB6731AD72113107B7BA594A76CE3F148D010F0B37A546BA0B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VMProtect/Code Markers/VB6/Form1.frm
- SHA256 b2f7ff7c5401d42629534f0bbf6af590012ffe1fc01f1ef17fb5cbe104985a50
- MD5 5bbe74c4f2621b85f74ed8d4e1620c6e
- SHA1 8517c3c792c7d1536c07c3f207a0f90e534cc398
- SHA512 946028f8f886c4fd941d62bf276ef0820da0acf19c8d51d770b154d87a427d1a117cda383b5ead3a19c6478311c9cc979402f89e19435083409df254245f9851
- TLSH T12B31674059CBE2306877C2948C27AE08F9E1266315571C22764E91CD0FF767E93FE766
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/VB6/Project1.exe
- IMPHASH 1c15af9dd6df387719122b359dc175be
- SHA256 3022f931ab6972d42171da9994d4d01e6031e72ad632a59e66d058999a5cb546
- MD5 a76b5af5f70dccb3d21fa40d3084858d
- SHA1 ad42a6581d6f348c7c5f9ff6867eaf95107bee57
- SHA512 1ff0f58b9d65aaf0068a854a679423c1896112c4005d22776007f61c5aac841d2c0f3bc1b4754927f52ad95d8f320c5a845b779e9190c7de498489e76778a700
- SSDEEP 96:P4zZGj57YNbJh/PA+1AzUxjT7DTNsRJ+nsYjkjLK9wjPTtYDSLtdgGDD2+xuUI2:rSNbH/PA+3/Nfsoy+9wDTi6tdFD2AI
- TLSH T13D926453F5582A32FA8587714D33CBAE2A637C302D61CD2B39453B1E1D74A425EE361B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4592
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
_CIcos
_adj_fptan
__vbaFreeVar
__vbaFreeVarList
_adj_fdiv_m64
_adj_fprem1
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaObjSet
ord595
_adj_fdiv_m16i
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
_adj_fprem
_adj_fdivr_m64
__vbaFPException
ord644
_CIlog
__vbaErrorOverflow
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaVarDup
__vbaFpI4
_CIatan
__vbaStrMove
_allmul
_CItan
_CIexp
__vbaFreeStr
__vbaFreeObj
ord581
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=2, id=9, version=8041,
count=1, id=13, version=8169,
VMProtect/Code Markers/VB6/Project1.exe.vmp
- SHA256 50f1d138f273381a9f20e5de3ae21e863196b632baa6953e54f4b2316569c535
- MD5 ca6ee0b36d32f372a5c8ee9b6282d9df
- SHA1 961c6106c58c5ed5666e969fe00dbe881654c67d
- SHA512 2b4b377e95ea04f6190a9c83310684f94225ed8022feccc0aedd76fe618850e4a62f11563fe5a558c7f7850876f53ac9074a4ded21dedd1e1f321a9d7746a077
- TLSH T15B016610F22D7E18022B009327F68DA234F7F344427B054589E955B7AB61D149EA33BF
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/VB6/Project1.vbp
- SHA256 68b7f23e3ecfa8c7f6a39f053cb1868833eecbd66f692bb790efb022f9184d77
- MD5 ef23132ea5dadf59a3fcbae7118d184e
- SHA1 abe00cc4ea746af66484841be6f846c53a931168
- SHA512 9502f9b08c573e0e9a6bebe9a6db1cab65201cc7b73c9969f0e9c9b5f1e1a478eab9e4df5a23fbc1917daa59313128661c70798f0400daffc3021ea511b830db
- TLSH T17301FE81725024BAF9B4303215FA79517ED7B37815D0102D82EC9CA19E8AC36B3633BB
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/VB6/Project1.vbw
- SHA256 e2003503729dd9ff3f7f0e8eea45b04b08983d1e42d89e62652618471a1bd6bc
- MD5 27bcc20c3a2ee74876e11bab18780028
- SHA1 b3df593b378cfcd28da8da748552427aa452cf5f
- SHA512 27779b11d795aacb609717b592df526018db29271f25e8b4c056f03ff3dcc795095befd07eeca8afa0d0ea2c3b9c3fbfc9bd8ef59281ca2ef0af18055dc5d815
- TLSH T13F900241050300E84747A7D49913D84B442D758A214910A096744E2834885991853101
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/VB6/VMProtectSDK.bas
- SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
- MD5 30d0ac58f09ba02d81dde6ea9067b582
- SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
- SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
- TLSH T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/VB6/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Code Markers/Xcode/Project1.xcodeproj/project.pbxproj
- SHA256 54062521d3a59780771fe9f9ce29902d82aa708bd8d297d0a8067854540941aa
- MD5 a327fba0cb5a78561ca36935eae1fc3d
- SHA1 8ab2b72a8536346e93cc9da803b41dc8ddf5febd
- SHA512 85902f9b28f0e5e7785f7f67fba0891756df3f8a90ccb0d7906a2408b90bfe8c085ed645fa1ff4b577066f9504e4432a5ee9b23edcae98435d1ab887f76c63ac
- SSDEEP 192:saIK6DDbL2etTJamZNJ0ZkHm0Rvo4uaMdHpJyqJgBq+nsOVQ8nsOCQCk6w6/e6Dp:l3ZTHdJz2IOVSOCe6w6m616s
- TLSH T1CB92323B336D261D5DF921A2627E03D1F01DC238619860FED4EBD2862CBB85483797DA
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Xcode/Project1.xcodeproj/project.xcworkspace/contents.xcworkspacedata
- SHA256 f07812c22099316c6d6c262256ea0f3a4d233ef115218cdcbc02875b6e87f8cc
- MD5 0804ff83cc3028484d7ebeee4a421b6b
- SHA1 a2992dad2a4710dd6ac35b42446aa1f11fc984b7
- SHA512 ea99528a31d65bde47a26700843d5fe35b40ee7c715a62f873b41bec21539a4bf11c5c9353a7f2b4394c4c45ae75ec990380027dbd14e1a12c47e5fe3ea98d11
- TLSH T156C08CFA8280AA253DF18E220B15C814F3BD304E2464041875E7CB9B2F61708C3D35D0
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/AppDelegate.h
- SHA256 992715ee2241cf0a7ee04e41ce9f3e3ac3ccfc80bcedea1f580c516dcbc96d38
- MD5 a78fc47ac285d19c6e73445426fd5a0f
- SHA1 2b3bff24cca28f778cebbb6f1168c7aedcd2732b
- SHA512 2099e6acd200224a6b17305f9836ce78707bbd0af015c243304277c1cba66f2fa18165375703e83cb95baf4e637c17f72bfce5361186eeafc50691d14ae55943
- TLSH T1E1E0619C9A81F47757E1002715415F53D41A340799A315873782D75A7496866C2CD37B
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/AppDelegate.m
- SHA256 1747002f5cb077b18bb7bd42eb60b605981ae9bb019b5daa5596f974c429f0b5
- MD5 b2892b077cc170783aca500cbb9a640b
- SHA1 f1ce491286118df298f167cf1d8c49de17cebe78
- SHA512 8547f9336fcf4e894a015270c6983ba8679dfbe39722fee7995f788573dd9e32a7632c4ff0ecfd5f759d2602a0c4deb6c9cc583b6440c1b2337bd659c44323d4
- TLSH T16421EBCA41415C1F03FA526F17188A84D425101F9FAFC9813ADF4248AF22A25C78579B
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/Base.lproj/MainMenu.xib
- SHA256 cf34910a34492d9688bb74f02e812a2c4791ec0fae164f55b53f63f7b437d629
- MD5 183e29929891471bb6d48d1da28dce2d
- SHA1 3ee34a260253a948fac1e9a508a35fae9f83910d
- SHA512 30ed92235d3b43357d4feb417a894fd51bed59983c01957fae43b8f0f70b9cee6651041dd3a9a135f1e707b0eaf44dbc2ee970826d3b461c4673269ce9d5bc4b
- SSDEEP 384:uO08mIW+g6gCvbjqGQ57yqWADbc1s8dKanj:uR8mIW+g6gCvbjBQ57yqWAnc1sXu
- TLSH T1CB337B04B6EC66B4A237021A6AD5F668EF21D0C71747010CB65C973B1FB7E9712F3A4A
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Xcode/Project1/Images.xcassets/AppIcon.appiconset/Contents.json
- SHA256 b35fbadc602a2bf35ba866a50151858ec25fdaa72a386ee5614aceb208238aa8
- MD5 e5c84c2ccf8fdd213499d73dc3dba561
- SHA1 fbe8eda6ffde121f9f3daf1b98de223ddf70019d
- SHA512 d9f6595bacf18bdd09335db92bd1fc155bda36bc7056323afddae7280c52a2a19e3ff4ef0b9efc3f2649b91baa26fbe5ff50d24aa0c1138b0c260beca1697c77
- TLSH T19211F02BC6653E0A1236D3226ACC5101F5AB8F1F429219573A7D97CD4F3E6961490F3D
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/Project1-Info.plist
- SHA256 1d3f2475f44e34f5bb47f54f19acb076753e2ca22e13f4286358fcb7d692f4bb
- MD5 013cd93f4cb925e34ceb72689a5fd7d9
- SHA1 5cc5c45d038ae4d6067ce3d1e9b220cf20e23b39
- SHA512 9c9baf2d6ddeef15e096d836717d0e13d5721108341f87f9b17f67b90ebd5fd5931482ef1ab2c86b4edf37f06a7c3507c3f29ec098afcc1f84839e0bf97791e1
- TLSH T19C2138B50260755D1E8213FB92F3C15E059871CC9E7601FAFCCEA63B200EA277370A16
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/Project1-Prefix.pch
- SHA256 a800b4a953acaf2351bd72d07a74bc80750d70897244bf9810379a8edc9be828
- MD5 2550518fdb548da55116f674672c85b5
- SHA1 a36f7e2a35b9232e7d7d7c45d2aa9558446c1a1a
- SHA512 0451adf4fdf870824acfe30d41db895cba9cc4d53cc61d3634055425ea56fa76a16db2c04833be31140a4503b33a5c27af6512edf291bd569852acaf8cdb3bdf
- TLSH T1E7C022A898A83136D10100104E1056A3F36E7092CB423118B010C0AA62B8E9E04F2A8F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Info.plist
- SHA256 6c49d90d1e34916d492c60bd5aebae6c2e46257e0515d45ae94fea01135e975f
- MD5 9028e4afb01633c93005e6734b32b2a0
- SHA1 f57b87f50dad9ebfedacf7747bed10d40c5fc0d1
- SHA512 c44dbc770ddc3208e3e4d5dd569a201bbe9888b77ea6275fa838629193c3d92a88c83f588f214774b3d184434ef65d371f6c377b6e799f062ae212d626c4b506
- TLSH T11731E8B5022075092D8112E692F3D16E119971CC5E3701FEFCCAA57F291EE277271A27
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/Project1
- SHA256 0a43b7994826517144e8966a9891b3cc79d6f7cfc49fd1bd6455457b5dd28f7a
- MD5 03cd91ac4295936399e7cdd94cd90ebf
- SHA1 60a032b1d53a161f5cbf751fd4dffd2f4d226c35
- SHA512 774eb2236f7d77af52681b970f84827793d482a33a181549d17e618a5d5c9a443cbbd22cc9b8ec64a494936ea250c5f2ad02a3e2e2add4cb113a6af81118919c
- SSDEEP 768:wvOMf6zurtmdbJ7i7vUtvOZAKEIIeI/I8IRR6THELmZ:wvOc6z0mdIcOZDFEzZ
- TLSH T14243E88BBB508447C58B0039C42ECB18E129F76DCF51B2D76AE9DA9D4FA0A435F4271B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/libVMProtectSDK.dylib
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/PkgInfo
- SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
- MD5 23b7d7d024abb0f558420e098800bf27
- SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
- SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
- MD5 SHA1 SHA512
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/Base.lproj/MainMenu.nib
- SHA256 50a5ffbaa783b6e97fd5d1eb13241cd3236c93a32822799f9b19e5dbf66660e6
- MD5 a14f8c59e65bc483c91c3eee3ddfad60
- SHA1 9d363f6601628331f840751733eddc8f2688f81b
- SHA512 e57a812b041b9a263de281f7b2069a9fbcec760c0bab00e52a2f01f3236128df716ddea3be607fba9149570766540001dde67181e01438b72af7ca28d558b15a
- SSDEEP 768:3jcUnZRCgiTMl/vSZxHX5YGNOysGiaY++V8tWPTmdi2:xnZRCgiwt23F1t3d
- TLSH T124E23A41F9B237DCC3E70C63B1B3AE60CD5A2851EF8267661E38A3D06F5654CE546A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/Credits.rtf
- SHA256 f2567d456578b1e500092eea27fa3da7c7df9bfcb915fd7575e3b7cbd6ce3a7d
- MD5 6e2bc43c0e87081ccf9fc2edfe8589b7
- SHA1 31250e2ae7011adf5d1268de756681c867cba03c
- SHA512 27e7356c3e92cb6271bffd43616fb1152ad7dfb40037058ba2499b9216033e5adee2525c86e2e0ddbe7c3e389e0f67de1ff0b3db5752d714a3466fc128ba7ba2
- TLSH T169F0D4F35A0120A1A347330773724177FE908B10D7535C45B43174C33C24822B70EC09
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/InfoPlist.strings
- SHA256 e27cacbf4f9358e9ad2056696e8c4cc4ebffd80d3030eb2c2fa94e6d57dca0f2
- MD5 9c0f6778c773aa003952bd20169da983
- SHA1 3926f2aefccded9ae9704abc34186df88d46c792
- SHA512 6a5c273621720e2a94bffa822a6d934662f58e9f5dfc8ea0ea5508a730488a1cd8a995c03401931b0165d09be1b9c8b89ab001df4a33ba48ac811f7ae072afee
- TLSH T1CAB0120262F83800F0F20F2428B950705EB83C001C7423CD2350501904E0D00C270773
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/en.lproj/Credits.rtf
- SHA256 f2567d456578b1e500092eea27fa3da7c7df9bfcb915fd7575e3b7cbd6ce3a7d
- MD5 6e2bc43c0e87081ccf9fc2edfe8589b7
- SHA1 31250e2ae7011adf5d1268de756681c867cba03c
- SHA512 27e7356c3e92cb6271bffd43616fb1152ad7dfb40037058ba2499b9216033e5adee2525c86e2e0ddbe7c3e389e0f67de1ff0b3db5752d714a3466fc128ba7ba2
- TLSH T169F0D4F35A0120A1A347330773724177FE908B10D7535C45B43174C33C24822B70EC09
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1/en.lproj/InfoPlist.strings
- SHA256 2a7f77dd390052d5407e2b494b173a9fc6b671ab757d25b79ed23352361dce5c
- MD5 3e5337e7aae41797043107c0a05980c7
- SHA1 c3b87f4a1d0b7a81c08b54aa19dfcd34db210ae2
- SHA512 23ca07123e45876869ea50dd5b22104d2934a6ad4dfeb3064c2e604536dd0df2c29076b70c1f475f015981654eb81d70c10a96cf678a4cc6913fd48eff8f20d5
- MD5 SHA1 SHA512
VMProtect/Code Markers/Xcode/Project1/libVMProtectSDK.dylib
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Code Markers/Xcode/Project1/main.m
- SHA256 07a6d43e2e91d27274fc7140363848599c71aedd5333fe478555664da8ba5b23
- MD5 7b5e4871d402cbb63e3e25a522ea17a6
- SHA1 aebcc847072e54c7cdeee1308a8b34f3e4b5b508
- SHA512 d387e993a98adcdf97029166a595317d7e415346c410e7401105e367ed3f3eb7a1211c626cc45b69c575e6c19c499f523a07faa7aaec2c6f77a30036d09483a2
- TLSH T165D02BA851E1A47B5BA2627B6545CF02E4913003A5B674413702C107467381419D4007
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1Tests/Project1Tests-Info.plist
- SHA256 c1d48a45e17d64057746317060e6d86d00358eaeb4b7b245e4a81a6ee380b55a
- MD5 75242e0f8e8a36e2167f97ba9d049c12
- SHA1 4a89c1fec775491f53070d578792eb388cd7ed96
- SHA512 d24195024cd2940ceed99f13092ac393766e835ba87a6765c6340cf08ce3f3ede9819eee77dce5eef71f9aecc7fb05ff0b2eaf0ab8e0463ea3c0e03b5064685c
- TLSH T1D601F7700260795C1E8317FA92B3D15D0298A2CD9E7612FDFCC9A76B210EA277771A16
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1Tests/Project1Tests.m
- SHA256 7ffa37c3ea82e0f5dddf1fc63308b6b437d07306aba2f6049f6f89c91d26d090
- MD5 75eb54ff2a818642e521e4eb48a29317
- SHA1 1394cb9b2303f27d783995950471649b3f0e8438
- SHA512 7dabbaa7a77847f4e4be53fb9a7458cf4a9cce200300795244bf3fe356ef360741f4dbce6812c68e2ac3d22eb0b54a6c188c324f4fd66549d56ae828639639ad
- TLSH T1E2014E5B1987E3333BBB449B12095756FA239612C91349A07DD7E60A1633CB4237989B
- MD5 SHA1 SHA512 TLSH
VMProtect/Code Markers/Xcode/Project1Tests/en.lproj/InfoPlist.strings
- SHA256 2a7f77dd390052d5407e2b494b173a9fc6b671ab757d25b79ed23352361dce5c
- MD5 3e5337e7aae41797043107c0a05980c7
- SHA1 c3b87f4a1d0b7a81c08b54aa19dfcd34db210ae2
- SHA512 23ca07123e45876869ea50dd5b22104d2934a6ad4dfeb3064c2e604536dd0df2c29076b70c1f475f015981654eb81d70c10a96cf678a4cc6913fd48eff8f20d5
- MD5 SHA1 SHA512
VMProtect/KeyGen/DLL/Delphi/KeyGenExample.dpr
- SHA256 9e9ffcc9f736aa26ca1c357112d8a380f80f934c99f0ecd8f44ca1c96afc7d55
- MD5 0d62b1a3a2af5b5ea23618a6e29f9ddb
- SHA1 f08b87bd28885f21ab98df7b1a2b08062ee17cb6
- SHA512 0ec5c5d48f8f43a14ff2fc93f3bc41061a9613c7b6f922ecee1d8444924b5aa293454fc6da68e61f6042f5ab6cdaf8bfc61f2771b512a107111dcf6bfb590be3
- TLSH T1D76164EE8916621F89F53CB1D3029DA2B919700BC1F2CEDA30D53AC64F76D14A7906DD
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Lib/KeyGen32.dll
- IMPHASH 9e46d55512301a0e25ff020e01794a52
- SHA256 f2f7756ee63221a0d65746a74e4ddc4d8044d01212d8142a26d79ca0acec49be
- MD5 ed5611586543d36119984e5b4d962ec7
- SHA1 3df7f5a5025792e19dc0862779ff9a5b9c73d279
- SHA512 28c976a6e94aff7340ac9f111c386ef5b2050ebf161102a82a6b00d7499e99dd4cbcd15788ed16b5b928a0d54921d23b480928cc7f4164f9c08b351709ea8ce0
- SSDEEP 768:ajqJuBbVqkcULZLoaZtS0wE63y8lF98hkYLCbNFTos8n0ED++clUb0ULJGI:LJuBRDCaJayYF9M+Oi+zLJr
- TLSH T14D537C10B690C033E1A62930A9B5A7669E7F3C015BF550CB7F980BBD5FB02D16A38367
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
18936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
GetTickCount
EncodePointer
DecodePointer
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
IsProcessorFeaturePresent
Sleep
HeapSize
ExitProcess
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapReAlloc
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
VMProtectFreeSerialNumberMemory
VMProtectGenerateSerialNumber
Name
.text
Size
36KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=68, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=31, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=66, id=1, productName=Unmarked objects,
count=5, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
VMProtect/KeyGen/DLL/Lib/KeyGen32.lib
- SHA256 3964724f3a06b1a1507ddf33595b3fb13ff22f3c484be438af7534f6175c5568
- MD5 a4d8c1e647c940ce20371391513becc0
- SHA1 c36da7f3bffe0c054c5b6def2dd9533c1d75f9ab
- SHA512 4d1b32d629348295ff4a07df31bff67e50a49fa01873845549c32ab81634020584ccc00690b58a882b9a8a2f5a8b67f06bf2883d52d40802a12a772e7b1804ca
- TLSH T1BB5159916547BCABC857D9B08542ECA5721C2403D7E5EAFF351C84A383EB74AB79408A
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Lib/KeyGen64.dll
- IMPHASH 44d72ff3208e2f77edc20a3432274582
- SHA256 36cfd91644f4bf6c28fb1d930c7ace03803b35002da5e7d4a6b756b20c97df0f
- MD5 96a346078d81b1fbbc605752030c8863
- SHA1 97f75c29cf832f7902778bb5b4d3b49354e2acc3
- SHA512 a52cc105bed46dbc13b46f57dc060376158b8f3711961efc0e3ee07b3aad7489f23bc274e52e9f26a594f5d3f1722d094b959c24b76f459a8acec3902bf1a428
- SSDEEP 1536:wCkiPbixLCodLXP3ZJwtvgKwTADEM3bht8xgOqlwkOZ/n/:8P/wRQTAIMNt0gOqSkOJ/
- TLSH T13D73180973A800B9E0678279C8E79A46E7B2F842677293DF5364035E2F637D15E39372
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
22376
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
GetTickCount
EncodePointer
DecodePointer
HeapAlloc
GetLastError
HeapFree
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
FlsGetValue
FlsFree
SetLastError
FlsAlloc
Sleep
HeapSize
GetProcAddress
GetModuleHandleW
ExitProcess
RtlUnwindEx
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetStdHandle
GetModuleFileNameW
HeapSetInformation
GetVersion
HeapCreate
HeapDestroy
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
HeapReAlloc
LoadLibraryW
LCMapStringW
MultiByteToWideChar
GetStringTypeW
VMProtectFreeSerialNumberMemory
VMProtectGenerateSerialNumber
Name
.text
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=65, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=10, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=32, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=68, id=1, productName=Unmarked objects,
count=5, id=175, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
VMProtect/KeyGen/DLL/Lib/KeyGen64.lib
- SHA256 666a61c98bfa6bd4812130c01f4b9f2fdd71a07818713c5bd1a967dee92bf62b
- MD5 68ef9d4aa6d3634595612e02c3ff2977
- SHA1 cb7f713baef1f741ea6bdba73a9edd221c701f06
- SHA512 d425590c0a956e67904bbf07cd72ce9d3a7da7e814f71661a6ff1e8e661703345c6625df1c8988b566936f2bd0010dcf84f07e04db9a08b815310e6218741f20
- TLSH T17E51DDD07A5378EFC555AAB44007ECA6321D201353A5DEEF350C45A643EBB4EF79843A
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Lib/KeyGenAPI.h
- SHA256 115c0be93e66b1620e0dd338370c9de973b20726886b93146aabb7ed61ddab12
- MD5 213de2b41da47865e3db75d104af491c
- SHA1 5cbd6275fecb316d771d911cb9fd88c166a1a828
- SHA512 3cf8ce6fad464630ce565c2f531ad2cafec41415b7868d78231f91cc555cae981fbd4e5cfd8e1b12dfe618e1a4634a112a212b08b8b4812c591c22fccc8550f8
- TLSH T1294103D95911A39FC16435B0E17AFC613405300A24FBDECE331D4A11A3434942BD49FE
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/MSVC/KeyGenAPI.h
- SHA256 81d680d18ad315eb7c8e3f8ea7e51cfaed9cd5cc711f43dc8b1c22d366d28ab2
- MD5 6ecf155a3005f002d62075f9a901d659
- SHA1 2b1f6d1d5f5a72279eef2d2d18922b7864abab5f
- SHA512 da4592e930ccfa17ba56781ca2b4fd4b8e9589d023c124d5f59759c961c1a28082f56fc6b833c0e693da588202902d560aae7a838e9f6dbe6a3ba80d37b26d51
- TLSH T17B4103D95911A39FC16435B0E17AFC613405300A25FBDECE331D4A11A3434942BD49FE
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/MSVC/KeyGenExample.cpp
- SHA256 43320c23a3861dbbb9c2f1407b35d16c0ff134974a3d76c72ea548c8291bc699
- MD5 401734a2ff3bc79a21ab66f14c02d0b4
- SHA1 cbb2669ce62d4df78ae22ffe135159e5413b13ac
- SHA512 46ee7fe1bed81c4575f2320ddb4255f58622e5c0abd8fc4adf8dc81241d90109d105e5bc3248d2fad792ea57c1795ac2545ad702fff643cd8b8776af37c33ae7
- TLSH T1FA21E1611C62502B279638605E718F53798020254BBBDADEB14C7DA2C3A78B963F51CF
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/MSVC/KeyGenExample.sln
- SHA256 8ffde88861db97dfc5062a192e3f6b09dd025316ef2f4993679b76dd10af379e
- MD5 7873575bfb3b22c62f65c28a1e67e06a
- SHA1 87a701827c9830ff3e0757ec77fb02890d0c3320
- SHA512 650d7b3a8283e4f30f955c9afd98b9cebf10895363c5c93f7f75f2d766f6854da7c7012926d7e6e73dc81dffdf1b48dba4de74226c2dc8b9373053f7addab642
- TLSH T1D8217D68612D6DD654429A9BF0F84DF5AA370764829D38FC0CC1E479EB37386912B8C2
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/MSVC/KeyGenExample.vcproj
- SHA256 a5d418df9f9ad24b75a8c9c13913d3db4d642abb5e03fd65481b40f66fd32b33
- MD5 778306cb8f621459e8a578263b1d96a9
- SHA1 1eb8135a14f7cd6251bcab8b4806eda297bcd9c7
- SHA512 cefbc28ffe204b375e98e6f299731d98832249647b72ba00c7b73a14c8b829d64d464f7a04dff4390edb3ca8620327e857aabfdfd9a7557cdaeb02d7869e2073
- SSDEEP 96:oiz071c0zoZzCcwoLzNC7+cnCovzCcwoott6ipfwpkbI4:D0W08vLEfnZvbiFwW
- TLSH T1D2E14E58732C3CD552C182A31EF604C83B1EDEAE050E12EBD67D7572E5DECAA6322761
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/KeyGen/DLL/MSVC/stdafx.cpp
- SHA256 d23184016d3d66ed9aa233ecb322ba00fbbcecb217c07a3c38f0c050ef8a7c99
- MD5 45052642e89c1c714db544eaaad2bced
- SHA1 710914b2fd35ef517a62f7227ff873c15fea2394
- SHA512 b4167fec372832a4d41cf82390dbfe4c0585b2258cc602fe59530fd18778c994401aca09515ea87bbc249b72481c35693a16d8e27cea3018d90e51d94784215f
- TLSH T177E07DBBD88C54B100900450F24BE487A30EF014D36085200009A389E01B99BFAC398F
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/MSVC/stdafx.h
- SHA256 c3927a6b3c740fe5615596e2661fcca13b2e744d2381b71b594672b18e97cafe
- MD5 c9f9aca10d1eb1ab2fb27bf20a9958b7
- SHA1 42c26bf7c945fdbe981a273ffbea2c8f94d8433e
- SHA512 09571b985dc05ae41b6345317eb71ac27aa25944964f80232e000e32e19aca6be7fffbad9299ac225ca1862be527b79d0fcc0b2516c39d829844865d55d88c6e
- TLSH T1AAD05E30C51D9086F20311A63607D932E30CB8C94795B12D605270FEA540EC663CB7EC
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/MSVC/targetver.h
- SHA256 bad5ca557eb99c1e3a43d3098fe0fef8def7228b724dcff3a72143f3717a8eb8
- MD5 ca1c19b9c013793a766ed9900d6968e0
- SHA1 27ef56be395a20dbe482bc8df3185f28591ca08e
- SHA512 4200c14e53676970a3472002b8b00ce94627dc368841b86fe2fa65c5541ca1f322a3fb6dd5d41556469b0fefc8763c35c7c7b4b5f1896d194c97dfc396752e73
- TLSH T12C0120522BD683F71BA1050317CEB39A972084FE1B6B525C70ED636463A7000432E2FA
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/KeyGen.cpp
- SHA256 ac969f212d3e60e23d5b6d89b78ed24616a1acf294c81af2a8830a112e1b6da0
- MD5 5b8c87edf47f86b77f56edfa52f120f5
- SHA1 2b41ee66e2970fe41ad82fb41fb6c1e6103568bc
- SHA512 b8c50532c235cff0c62726587a085504b5924731a518ec71ca7f3b22466f4f5fcde9ae44320e0069aae3c78558b024de2f278a0314362674df8c30f5582774e1
- SSDEEP 192:QllCP6rrb+ngn7TdkMGJv+037DRrlwMWPiXx09mLRSSk1:Y+6rf+ngnvdkMGJv+m7l/Xx04LRST1
- TLSH T16EF135C96863EA2B171625A080B3C782BB4440BA66E39AD7B6CC35653C935387F741DB
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/KeyGen/DLL/Sources/KeyGen.def
- SHA256 8a32ebf94592fd5926bdf1d91652913a604f3546434f028f815492dcb2cfd51f
- MD5 023be6ecefdcd3a6e8944fa3e36f4abc
- SHA1 ce47f74e27ec5f13f3b18c42a60b31d568cefb8a
- SHA512 ff8b1ee502c58311ef9bdddbf52c666dbfe3021007b861497b8d09d47324ca2cc4a88758980b09d89a7b55652125dcc0862cadbb62b2ad1f75405039722669a0
- TLSH T1A8A0021C006BA0FE42C77CB08836DC7270A5006BC1ECA5BB611CC76ED3A3C4923D889B
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/KeyGen.rc
- SHA256 40436872123ee43d3919ee939b2818211b0ead4665027c76ed23cb5e2a1e8aa9
- MD5 7ee57e0159e66f6bb6441db8dc42eff5
- SHA1 80842ec0fbff7d873f4ae282920d7fe69b4461f7
- SHA512 87a9640f791221fefba6beb72924d6176c4c90154517285543e921a7a9f6feb885b0dff96b2e8550e2ed06235d7eab57bfb306eb429b749ab7df7ccb9c380311
- TLSH T13251CE530C4151331A30B3F16C016D57E26C525B92B2555DB18EF498AFBBA0F13CCCAE
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/KeyGen.sln
- SHA256 90a54af9f1f0296c95fac2aa9abaefea2c209d04bc70c73ea7a09f13e8fda704
- MD5 c76864c43b426bcbecdde6b06cacee72
- SHA1 8321a2e951c23358a62d09bee65bd2869929af53
- SHA512 888b085341f4c4f1453c0977d61177f61303e9636a6631adf9dcb709f7b0f080f0524c5c7a730c364fb6ee2f641ae3ecb427bfada425c0e39f22c3dd77354c56
- TLSH T1DF210774221F7896988169AFD5FC8C69AB77428CC24C043C55F6808DBF7F642511AE83
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/KeyGen.vcproj
- SHA256 e71a2f7536a42aeda0b236599a2be99fbdf7cc031bf1f6e057c7333a20d3286d
- MD5 d0700314684315b6b96204a7c918b907
- SHA1 16c481d97ed6770450e2fa2461da317c6892c0e9
- SHA512 af067165fd39663f921694e005be321d3c13f07cf19ddaf9c9b2c6569bfde7ba056c047c0238fd69253177d25db2bcbda390935b7510b7dcb1bfe1bdf2a4a0ae
- SSDEEP 96:tJzelycW6oFz9lUckoKzNY5hcYtonzNY5hcZkoottjipfnpfwpfRpkbI4:DeBW39jEWAYEWAZ+iFnFwFRS
- TLSH T1B3025B58732C3DD592D086A36DF604C83B2EDE6E010E02FBD57E7576E59E8A92322770
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/KeyGen/DLL/Sources/KeyGenAPI.h
- SHA256 a3ed3cf0a617e2350f2833b98c6a0dec048925655b9be79720ab8646ae3bdd3d
- MD5 cd4b1a9065c3b84b68fbb48c1ded3afe
- SHA1 49eaa6e04f69314af2d32a5a13bac475c090be07
- SHA512 55ece562d6e76a9e90dde9648bed8c3f086cedde95c04fb5c0bfb114e9c872cddec4f27b30652cac5bfec7004ee18304d0e6a098cab310fa4e93bf9bf7e9ac5a
- TLSH T12D4103D95912E39FC16435B0E57AFD623505300A29FBDECE331D4A11A3434942BD49FE
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/b64.cpp
- SHA256 7045296851881d05833f91d589f1aa275748682258b2f880c7b058df7a95917b
- MD5 565cc6e2453bf8502cba5891749eb22b
- SHA1 40a9769ff85f2985ae22fc751d1d817f85198c2d
- SHA512 c52414302cc811e76101c8e3e30ae8a731c9c1dca9cb0507dbdaf552e778bafbaacf53f790ba19b4e5e9571bc248971d2fce3c82998547abf6fe4f69ddc5ef10
- SSDEEP 96:+KFclDD6hbFuWf4p/hbFW3+4ztfB/zyLbRf:+V2Fb4p5FiZFz0bh
- TLSH T1E3919695139242B864B7431AEB67C94FE73F212735451688BA9FB9641FB28D033B1CEC
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/KeyGen/DLL/Sources/b64.h
- SHA256 19142650a0f74478c64916044b671cca75ae42edbbcfcd184269ac7d0e56632a
- MD5 3787661ee321bf83e5e24e3dd95b1431
- SHA1 cd64091afe2854e8dea097dce8f44ae6c540e3a9
- SHA512 71c1ef0a6a8c69296194ad093b723d51f6264e2063f71b303fc79de43a45b3b11f0eec6a73db1644cb3ad3c2293eb2af1dbcdf933386b9fd4bd0e818d5b7fc0f
- TLSH T150D05B47049554C16DE11B8586034488C139A3AD32E49BD42F9E73A4EC533E23693C5D
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/resource.h
- SHA256 e2a5d407d74299c364e96dbcf356e4106423f38e76ea0f5c7dd52d59570c1bc0
- MD5 16405e0ca2e276e1ac7806c4eb8bf241
- SHA1 aed8dfb0dcd78edccee85c12441906d534a78b13
- SHA512 e1654886b5b957e0afbf2e574d00bf9b6135a1cb774fb0740677ef36b05974b854c42b22bdd203ed9c68da1040e3796c5d2fd6041e04203c5333a8b6d2ca5368
- TLSH T120E0223A8D88C52B5450F0C2000124178A5CBD9BA6890B7F32CCF4ECAF2A86502DA04E
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/sha-1.cpp
- SHA256 d0b3de85b088c9693efde6cfada151b3ab06b9322180e84a906580d08b253515
- MD5 b0540fb1dfb272b933195c3ba54d53b5
- SHA1 945e09af3916fcde3b843e331817b88624202586
- SHA512 1d6120305493e48714c83f99d01633761e5e50a3bb933754e6f2dfb19d26a36fb0a6ea0d7904c461cdf587d03b2b7833c2ec011b739c0155b56bce0b6a38946f
- SSDEEP 192:SVbqAyMsEoTq4tTDAuRjS9+iyOW87DVusFcech6QOiyiYuZeDUuMuSv71XqGgV:ayVPT1jYcech6QOijv71XqGgV
- TLSH T1DA22FE2919A04E28217741B67B0670D7E710E2279727A53FB06DA28D9FFC8D183E1FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/KeyGen/DLL/Sources/sha-1.h
- SHA256 fcce8c129b1d7e234b57dbaaf100e2cb3a9c2d32ab142768e39a5bc2bad3de05
- MD5 1dedcb4fa98498c32505ee163086c3af
- SHA1 eb0e54aef302ff141ef1efeb57f686450d33821f
- SHA512 45309a0e595d935ec1c38b30703b9f2e036d05adc0ede748504d38f58576aaf7039c8fa573b1497ca0765147f1a11f4462b2adf0d36ac5f4d0aad88c5d3a3ca6
- TLSH T1C731444724E4BE6A507B01B32B21B0C5E71462070395B7B6F0BDB26C1F9EED46392EE4
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/sshbn.cpp
- SHA256 6dfae3e9c96dc4c3c47ca1b8db03647cea8810633ae067d03e0f5c923ba40d02
- MD5 ad7d77f577585dfd6467b713d316baff
- SHA1 8c337bd6dc21a49a374fb7f5d3dbe3412c23ec40
- SHA512 3039320af2c0b1660b9a431cbbae2e36cb3c080655edaaa6ae4001ad1f7fe3e14defed2cc5c543dff5b843bd41ff25bf560e6b4a0511b2be689dbfbe3c9fc0d1
- SSDEEP 384:ZpszsbnFF+G3BL6/Odbw2iwP73bgDI6QWUbw2nX7ImW92H7wbw2XSiUxxcDTDvDt:vEs+aLh8wP7rGO2t9Lvmomwl0QWXhWP
- TLSH T173C276594E9271313773921A5FB48024EB2DB11F34E632EEB83D01A62F3245457FAE9A
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/KeyGen/DLL/Sources/sshbn.h
- SHA256 01b3a66510575a6f4f27947f966f2f983de80defaf944485c110a3ee7f189ccc
- MD5 de98fd04a79c9ce4fb2fde790782c425
- SHA1 0dd4c1e5c0c9d2fd1a0d4442da22bcd66d39f46f
- SHA512 8411411c2cd09455d807550bf07bce3dbff5039c2ae9c922745cc552f03bcc368e4cc1b2c275a8db8b259ea11c88439b19c11b43bdb41fda673632ae8d9d7420
- TLSH T16231841D3D9053A11BB60351A25194BAF11BB24E3DE632D130BEF36A1F25868EAF7C84
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/stdafx.cpp
- SHA256 ef4597a2058c6fc7ba90db0de77025469d56612f23f6bbeec9da21e136a50717
- MD5 fb275542b044bf3ec0df55bcfbcb0eae
- SHA1 b4e4399429df4e01af250be15bcf36af91c790df
- SHA512 485c21fa0ab2a5b10836e93fcf259918e65803a09dfc2827c76726cc2a6ec23e927150664e137a5fa8a2c6feeb424278a2ac218e11b6e025b1df1352f39ea160
- TLSH T1A1E0CD7BDC9C54B040910450F247E587A31EF115D76445251109A289E11B59BEAD395F
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/DLL/Sources/stdafx.h
- SHA256 b065d2603c2cb38bf00b352d406621d9ee9f9cae3b5f9cd772e24bf34377ef32
- MD5 23696287d158f08c17bd2c2d30e532ed
- SHA1 39736abf75dadfaa83b15aeecb58f6c5ea21ccdf
- SHA512 c0ecbdecb5edbfe2f5a232c2f1a91985006b2e2b8e78789548b8074814606f006d285f2ad2abbb0d154f5ff929807b977bd60c3bd9688408652d867cbdadff6f
- TLSH T181E0DF68CC6D80A2D62324A6611A8138208CF69317C4706B700A3DCFB8398C93FDF2FC
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/KeyGen/AlorithmRSA.cs
- SHA256 744286c0e1bbaed27bb316dd36a37d015ac9d9280d8e39429caec411aa0366c5
- MD5 e61242cbf26296aaf08534aeac47f737
- SHA1 368d6ab6e2c8f6c0f1424920d9afa27c87c67dee
- SHA512 6feba9ecb65d487ada144d6eecf379745c1b516e85565cb8d7fe1553d55efe0df9936593e66acfd56f7888940bf29212cb24da83cf23d8b35b78763c1dc54f6f
- TLSH T15211CC20B76DD33E0EC564417870ECC7BF3BF30440FA95AAB8AA8AD4C09081053B4ED1
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/KeyGen/BigInteger.cs
- SHA256 66ac4d819622d592f834ef41168647f12f4ab89578363059954f4f5522c0dacd
- MD5 61b08a88562697a10b8ab5df28b7dc02
- SHA1 33cdf517b81617c6725260e85216a45c24f36ced
- SHA512 59dec41b95bc7f51b15aa549e2171edbb4173016324009c788431b33dbad6daddd93bc70451fcca32f24736ee6f9adb72ef3bda8f5f8690300ae5744ecfe59e5
- SSDEEP 768:bjomlEt3rtjU+Zh6mk6/V9f4qpYcZ5MdK3juh52FbAdmdCt+:bjhEt3rtjJf4qpYORHFbZCY
- TLSH T18AC365446B470E26187745148FA928CAFB25F53350E8A258B81FB7A82F7CD1522BC7FD
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/KeyGen/Net/KeyGen/Generator.cs
- SHA256 296d4137093d7219832993af46282d64afdd5a129c10ad1d95bed6f2d4c0d137
- MD5 7be460418643b5db26f1d674b6d0a66b
- SHA1 794fd3c3a0ca3c27deaeb080b34949188212801f
- SHA512 10f2d7249e283dcfb9b623cb88c6d3846aed3519a46098a466633c0da058e087304f87d756d1af5d9d6aeb284cf61c1139ad898c78de11f644c97cd2ff9b6497
- SSDEEP 192:m3U2uTWoYc36oFtIOWKaxUtZRd/BzAlAlOtNRX/zqsv/xsVriTZq9LliZk/5X:m7KY46sV1BLs2UmEA
- TLSH T1ED027650751E526A26B621A292B1C144FFBED133837085A6B88D7E005FF4F0E6BB4FD9
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/KeyGen/Net/KeyGen/KeyGen.csproj
- SHA256 1d6ab2dbe2e54870cbffff850e118aef2514a3a72dba31137370a465ca4e618c
- MD5 36d26f19f21f6ecd46146bc30adf443f
- SHA1 0c3028e7f2f1cac4f323596a00b6fd7b6a2b672f
- SHA512 9b423366cba99fc5e57da7d108999b37b769680a12aa2de26c327c7dc847f7c807cc4112d87350edbde6ad7f73e20067c1373a0c3a0647fed9b41ccdf27d4187
- TLSH T10E41C034C1D83EA652B14533E167AD42EF75A3E324A00C69F65DE60B0BB3B681613B73
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/KeyGen/Properties/AssemblyInfo.cs
- SHA256 41ccc5d36c9f998cd42a26c4eb6d9315cb7cbc77a7ab7c05aaedd087cd26a228
- MD5 a37540a3323e3b73fd8fed38dbb8f823
- SHA1 d7b5746c065b24297ac500d7e8baf0ff52ab724a
- SHA512 4c1562ab56949b0bcbdd006dd88e307fa88d192a2536b7bf9364cc752901546eb90aa690ac3f1318c2a3f91d8c028622552a088738a355751e4676e59716d7d4
- TLSH T1DC316D2D6341A37E8F510093AE6B75C5837D6378D2FA0C4A39BCB453E341B7842695B7
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/KeyGen/app.config
- SHA256 8567f33dba5f913093548577c8eb64e6e241093a6fa69ed672f7f34cdc10cfc8
- MD5 ad220032c67a8b2189fadf423f9bdfc7
- SHA1 8b14638db626dc92492c662e3b05a3ac6485d549
- SHA512 b071ff1a5c4766514cb7505ba522bc72c3078b1741065bbf0b9b5242b5ba5a5c48d86c48a778becd2f98b7afecd6c0f3c2b5fb6788dc7acd48210f363413010a
- TLSH T187A002C6562C9D23BC434F67D6B90E05FA310785C56A100CD46F7777420517C5706246
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/KeyGenNet.sln
- SHA256 f9254ede830661ecfd3f258526c90b4fcffcd69b078ffb631dc0c0a9aca0d940
- MD5 6117926d74e7b4c80540f302069ff385
- SHA1 287ed041f734d432a3f686f59412777a99633e9b
- SHA512 65d8654f18b5ba172b6de72e7c6a02c7494583c33ff90c7616ee70fd683f6ff83f9990b60ad4c8aceaf0c070274c72857a120a1c4d1fe57d947835b6df73fd66
- TLSH T1EC315AA922089EF6F6C223D6E2B22CD775378094C15B4C3C104E906C5E1FE54767A28F
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/Usage/Program.cs
- SHA256 9ab5329169713cc52dc010fff97f28e0b88ac775899f5def24dce575bf0d63f8
- MD5 f630c32d62379442c1a6a57555351c50
- SHA1 cd1bf86fa8e1db2cbe762c03436a3c30aefb1660
- SHA512 7279e435fadbd0a8c393e2931b4299abd777968f22b2672c666d956e02bf2585d08da33ff4d419cb9887e80a3be6fe472021e6c3882612e4e425303f850821cd
- TLSH T1A51110071A5947A910B373979B125800FD7AB6278B618223B94E0C066FB4D087774E24
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/Usage/Properties/AssemblyInfo.cs
- SHA256 78a484e445546e511e9cde1f74be9e268f700294ffda755d22c30654293838e9
- MD5 3efcb830e3a385a4d5b66360083004f8
- SHA1 0b476c8bf045180debdcb40a000d3b8f0c2d74f7
- SHA512 26768b23988c302d5bc044d975c03b666d56a10f1f64da60b9c2432da309f82998ed8852051353d38b0c75333bb61611755a52bb55e83e84f73a5a59f86dac7a
- TLSH T1BA217C2D5741A33E8F110093BEAB75C4C37DA32882FA0C4925BCB453E201B3843A95BB
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/Usage/Usage.csproj
- SHA256 a1247dc89d13755d78e790330796160aa25cd367b2ff1f762aca8d6233f42e57
- MD5 c067162286cc8d65e2c3b2671997f493
- SHA1 b5ad0a0a9099e0446bf5ef954d6cba4c3739c1a2
- SHA512 7e6c9b4dadda8127198da329f95d2500d9d8d50ae777931e678e44f9511eceb30911e29be355c1684b0f11c7a3c26b6427975569a5ac1fc920c4f6ac66c564f5
- TLSH T11B51C134D1D8399752704532A1627A41EF7993E325A04C58F69DE50F0B73E6912537B3
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/Net/Usage/app.config
- SHA256 bc22384394191e57727bee7136fffd077ce8b44b15e3696f2d0e4d2910620048
- MD5 6098c30c4ee739e5f988007e177ce308
- SHA1 f1fb5c24b06f5285a19173c9c4f834ea90ec5363
- SHA512 0f8f1c69d5e4dd928c460afd76e13193cdb4c87990e7eafec512024e964493683902443b9de21434d764f9ad9110f8cbc5a9a4907383f1fec46a4b4f24a9f7f5
- TLSH T182B092964628AC2FBC231F2357540A45BF3903929168400CD09F2B121A012AE831A346
- MD5 SHA1 SHA512 TLSH
VMProtect/KeyGen/PHP/keygen.php
- SHA256 4981f7f7568d18016d89e6ebf0d38c5bcbe7f197d212cc4370edd197438f335e
- MD5 9b7f078dead8a3600b03a3fc5874ab57
- SHA1 a27de6418302bb948cbf5955e29e7f507ff0e129
- SHA512 cc25970fa6e81055b9206f7da72397e06455b14d648327fb69892e82580489f20a059b53b1207fd3b5550787f07e2ff4ee6a3a3628e5629d3e20923eba53c88a
- SSDEEP 96:JotD7f9qxAuNZuiRTXklWlsk/GXF+yD+4tVvSm+DeLxxlLis4+r/+SNukMGRQ4+w:vjdRbgV7VtN3qeLrws4u1yGRQ4+dnK
- TLSH T1E5F144197F9AB3A652C62460BD76C61ADBF82032332441D1785AF588E0ECE3C7B75C4D
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/BCB/TestApp.cbproj
- SHA256 30000994504ed73c734f1e3bf28dbb5acfc886ac40f660ebafe5a932525a8c96
- MD5 cf788128662ebc9744a77d5637c7ee53
- SHA1 9f533aac2b9614c385a068c371eb473441161447
- SHA512 bed6fd92e96887046e7621578b17814766f61d61f62f1edf895861c915415af4b0d635d9073b9e2bbc238f780262548def8906626a72d9033c265f83f3e262ff
- SSDEEP 384:kG5RiEmvvFDvQdRUNzpFdNztyeUQzg9tGR7psuYHjIYhGZ:kSiEmvEhGZ
- TLSH T1C852215584C429A946FE4B7B4E027840DE72539B21FE8C98FBDF62579F72A1C1043AB2
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/BCB/TestApp.cpp
- SHA256 b0cbf24666a698ab6389cd710ca45989bd82409f83983c3673762bd5f7ea67a3
- MD5 567fa4476c8464b9cc6998eac6914b68
- SHA1 980dae48f1d9f16e92de8132fe8caa138216ca85
- SHA512 dcc725c5c5829782d01f90cafa770f977add5f2ad47c4375f80f81c4ca72d580e30c8da729b89387675ad51c2a942c89fbff8a649463f00f549ab8aa7bab6495
- TLSH T15311FFABFD498073D2D3E47603349180DA7FEBAD4BE520A2F1804118E4D00AAC74FBD2
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/BCB/TestApp.exe
- IMPHASH 26e7fb27c5c9cdac46ddac5efe7e2eda
- SHA256 9913225feda352d3662c6a2498ccbe3da39fe0a5abb899f31aa7ea8bfbb99fd4
- MD5 fcc37089f845116c7d2dd21fe9f86665
- SHA1 8db3fd7a998cea640d0904ebf0547a8deedca2f5
- SHA512 590d9d56ee520a2c22e0c7e2a22d6d604732c5ef77de398eafe27ff0aae97ad5929906d4f95ec5702b4c89f6d26266386ddaf75f53b0adc826e3aebab3afe8d9
- SSDEEP 3072:s+YK1ZJCQSMbhoRVw2EVYv6VYi1p15QVx:v+QSMQVNEVYvSYeQ
- TLSH T1A0B32820FF588067F466C179272DBE50F1AD3A326091E21E7FE56F8868B50B563D920F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
rtl190.bpl
@System@initialization$qqrv
@System@Finalization$qqrv
@System@UTF8ToUnicodeString$qqrpxc
@System@FreeMemory$qpv
@System@@CheckAutoResult$qqrl
@System@UnregisterModule$qqrp17System@TLibModule
@System@RegisterModule$qqrp17System@TLibModule
@System@FindHInstance$qqrpv
@System@@DynArrayRelease$qqrpv
@System@@DynArrayAddRef$qqrpv
@System@SetAnsiString$qqrp27System@%AnsiStringT$us$i0$%pbius
@System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$%
@System@@UStrFromPChar$qqrr20System@UnicodeStringpc
@System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$%
@System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus
@System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius
@System@@LStrInsert$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%i
@System@@LStrDelete$qqrr27System@%AnsiStringT$us$i0$%ii
@System@@LStrCmp$qqrv
@System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2
@System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus
@System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius
@System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus
@System@@LStrFromWChar$qqrr27System@%AnsiStringT$us$i0$%bus
@System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%
@System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString
@System@@LStrFromPWCharLen$qqrr27System@%AnsiStringT$us$i0$%pbius
@System@@LStrClr$qqrpv
@System@@UStrClr$qqrpv
@System@@HandleFinally$qqrv
@System@TObject@MethodName$qqrpv
@System@TObject@MethodAddress$qqrx20System@UnicodeString
@System@TObject@MethodAddress$qqrrx28System@%SmallString$iuc$255%
@System@TObject@Dispatch$qqrpv
@System@TObject@ToString$qqrv
@System@TObject@ClassInfo$qqrv
@System@TObject@InheritsFrom$qqrp17System@TMetaClass
@System@@FindDynaInst$qqrxp14System@TObjects
@System@TObject@UnitScope$qqrv
@System@TObject@UnitName$qqrv
@System@TObject@GetInterfaceTable$qqrv
@System@TObject@GetInterfaceEntry$qqrrx5_GUID
@System@TObject@GetHashCode$qqrv
@System@TObject@Equals$qqrp14System@TObject
@System@TObject@InitInstance$qqrpv
@System@TObject@$bdtr$qqrv
@System@TObject@InstanceSize$qqrv
@System@TObject@FreeInstance$qqrv
@System@TObject@NewInstance$qqrv
@System@TObject@ClassParent$qqrv
@System@TObject@ClassNameIs$qqrx20System@UnicodeString
@System@TObject@QualifiedClassName$qqrv
@System@TObject@ClassName$qqrv
@System@Set8087CW$qqrus
@System@Reset8087CW$qqrv
@System@SetRaiseList$qqrpv
@System@RaiseList$qqrv
@System@IsMemoryManagerSet$qqrv
@System@SetMemoryManager$qqrrx23System@TMemoryManagerEx
@System@DefaultSystemCodePage
@System@IsMultiThread
@System@IsConsole
@System@ExitProc
@System@CmdLine
@System@IsLibrary
@System@MainInstance
@System@ExceptionAcquired
@System@RaiseExceptObjProc
@System@ExceptObjProc
@System@Types@initialization$qqrv
@System@Types@Finalization$qqrv
@System@Uitypes@initialization$qqrv
@System@Uitypes@Finalization$qqrv
@System@Sysconst@initialization$qqrv
@System@Sysconst@Finalization$qqrv
@System@Internal@Excutils@initialization$qqrv
@System@Internal@Excutils@Finalization$qqrv
@System@Rtlconsts@initialization$qqrv
@System@Rtlconsts@Finalization$qqrv
@System@Character@initialization$qqrv
@System@Character@Finalization$qqrv
@Winapi@Shfolder@initialization$qqrv
@Winapi@Shfolder@Finalization$qqrv
@Winapi@Imagehlp@initialization$qqrv
@Winapi@Imagehlp@Finalization$qqrv
@System@Sysutils@initialization$qqrv
@System@Sysutils@Finalization$qqrv
@System@Sysutils@TOSVersion@$bcctr$qqrv
@System@Sysutils@TEncoding@$bcdtr$qqrv
@System@Sysutils@TLanguages@$bcdtr$qqrv
@System@Sysutils@Exception@$bcdtr$qqrv
@System@Sysutils@Exception@$bcctr$qqrv
@System@Sysutils@Exception@$bdtr$qqrv
@System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString
@System@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi
@System@Sysutils@ExtractFileName$qqrx20System@UnicodeString
@System@Sysutils@TOSVersion@$bcdtr$qqrv
@System@Sysutils@TEncoding@$bcctr$qqrv
@System@Sysutils@Exception@
@System@Sysutils@TLanguages@$bcctr$qqrv
@System@Math@initialization$qqrv
@System@Math@Finalization$qqrv
@System@Timespan@initialization$qqrv
@System@Timespan@Finalization$qqrv
@System@Timespan@TTimeSpan@$bcctr$qqrv
@System@Timespan@TTimeSpan@$bcdtr$qqrv
@System@Varutils@initialization$qqrv
@System@Varutils@Finalization$qqrv
@System@Variants@initialization$qqrv
@System@Variants@Finalization$qqrv
@System@Strutils@initialization$qqrv
@System@Strutils@Finalization$qqrv
@System@Ansistrings@initialization$qqrv
@System@Ansistrings@Finalization$qqrv
@System@Rtti@initialization$qqrv
@System@Rtti@Finalization$qqrv
@System@Typinfo@initialization$qqrv
@System@Typinfo@Finalization$qqrv
@System@Generics@Defaults@initialization$qqrv
@System@Generics@Defaults@Finalization$qqrv
@System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TStringComparer@$bcdtr$qqrv
@System@Generics@Defaults@TIStringComparer@$bcctr$qqrv
@System@Generics@Defaults@TStringComparer@$bcctr$qqrv
@System@Diagnostics@initialization$qqrv
@System@Diagnostics@Finalization$qqrv
@System@Syncobjs@initialization$qqrv
@System@Syncobjs@Finalization$qqrv
@System@Syncobjs@TInterlocked@Increment$qqrri
@System@Generics@Collections@initialization$qqrv
@System@Generics@Collections@Finalization$qqrv
@System@Classes@initialization$qqrv
@System@Classes@Finalization$qqrv
@System@Classes@TObserverMapping@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcdtr$qqrv
@System@Classes@TLoginCredentialService@$bcctr$qqrv
@System@Classes@TBinaryWriter@$bcdtr$qqrv
@System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2
@System@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv
@System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver%
@System@Classes@TComponent@CanObserve$qqrxi
@System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction
@System@Classes@TComponent@GetObservers$qqrv
@System@Classes@TComponent@$bcctr$qqrv
@System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter
@System@Classes@TComponent@$bdtr$qqrv
@System@Classes@TThread@$bcdtr$qqrv
@System@Classes@TThread@$bcctr$qqrv
@System@Classes@TStrings@EndUpdate$qqrv
@System@Classes@TStrings@BeginUpdate$qqrv
@System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent
@System@Classes@TPersistent@$bdtr$qqrv
@System@Classes@TBinaryWriter@$bcctr$qqrv
@System@Classes@TComponent@$bcdtr$qqrv
@System@Classes@TObserverMapping@$bcctr$qqrv
@System@Uiconsts@initialization$qqrv
@System@Uiconsts@Finalization$qqrv
@System@Actions@initialization$qqrv
@System@Actions@Finalization$qqrv
@System@Win@Comconst@initialization$qqrv
@System@Win@Comconst@Finalization$qqrv
@System@Win@Comobj@initialization$qqrv
@System@Win@Comobj@Finalization$qqrv
@System@Win@Comobj@TComServerObject@$bcctr$qqrv
@System@Win@Comobj@TComServerObject@$bcdtr$qqrv
@System@Contnrs@initialization$qqrv
@System@Contnrs@Finalization$qqrv
@System@Dateutils@initialization$qqrv
@System@Dateutils@Finalization$qqrv
@System@Dateutils@TTimeZone@$bcdtr$qqrv
@System@Dateutils@TTimeZone@$bcctr$qqrv
@System@Masks@initialization$qqrv
@System@Masks@Finalization$qqrv
@System@Ioutils@initialization$qqrv
@System@Ioutils@Finalization$qqrv
@System@Ioutils@TPath@$bcctr$qqrv
@System@Ioutils@TPath@$bcdtr$qqrv
@System@Inifiles@initialization$qqrv
@System@Inifiles@Finalization$qqrv
@System@Win@Registry@initialization$qqrv
@System@Win@Registry@Finalization$qqrv
@System@Win@Registry@TRegistry@$bcctr$qqrv
@System@Win@Registry@TRegistry@$bcdtr$qqrv
@System@Helpintfs@initialization$qqrv
@System@Helpintfs@Finalization$qqrv
@Winapi@Msxmlintf@initialization$qqrv
@Winapi@Msxmlintf@Finalization$qqrv
@Winapi@Uxtheme@initialization$qqrv
@Winapi@Uxtheme@Finalization$qqrv
@Winapi@Flatsb@initialization$qqrv
@Winapi@Flatsb@Finalization$qqrv
@Winapi@Multimon@initialization$qqrv
@Winapi@Multimon@Finalization$qqrv
@System@Widestrutils@initialization$qqrv
@System@Widestrutils@Finalization$qqrv
@System@Zlib@initialization$qqrv
@System@Zlib@Finalization$qqrv
@System@Internal@Debugutils@initialization$qqrv
@System@Internal@Debugutils@Finalization$qqrv
@System@Internal@Debugutils@TDebugUtils@$bcdtr$qqrv
@System@Internal@Debugutils@TDebugUtils@$bcctr$qqrv
@Winapi@Wincodec@initialization$qqrv
@Winapi@Wincodec@Finalization$qqrv
vcl190.bpl
@Vcl@Consts@initialization$qqrv
@Vcl@Consts@Finalization$qqrv
@Vcl@Graphics@initialization$qqrv
@Vcl@Graphics@Finalization$qqrv
@Vcl@Graphutil@initialization$qqrv
@Vcl@Graphutil@Finalization$qqrv
@Vcl@Toolwin@initialization$qqrv
@Vcl@Toolwin@Finalization$qqrv
@Vcl@Printers@initialization$qqrv
@Vcl@Printers@Finalization$qqrv
@Vcl@Stdactns@initialization$qqrv
@Vcl@Stdactns@Finalization$qqrv
@Vcl@Comstrs@initialization$qqrv
@Vcl@Comstrs@Finalization$qqrv
@Vcl@Extctrls@initialization$qqrv
@Vcl@Extctrls@Finalization$qqrv
@Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv
@Vcl@Extctrls@TLinkLabel@$bcctr$qqrv
@Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv
@Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv
@Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv
@Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv
@Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv
@Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv
@Vcl@Stdctrls@initialization$qqrv
@Vcl@Stdctrls@Finalization$qqrv
@Vcl@Stdctrls@TStaticText@$bcdtr$qqrv
@Vcl@Stdctrls@TStaticText@$bcctr$qqrv
@Vcl@Stdctrls@TListBox@$bcdtr$qqrv
@Vcl@Stdctrls@TListBox@$bcctr$qqrv
@Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCheckBox@$bcctr$qqrv
@Vcl@Stdctrls@TButton@$bcdtr$qqrv
@Vcl@Stdctrls@TButton@$bcctr$qqrv
@Vcl@Stdctrls@TComboBox@$bcdtr$qqrv
@Vcl@Stdctrls@TComboBox@$bcctr$qqrv
@Vcl@Stdctrls@TMemo@$bcdtr$qqrv
@Vcl@Stdctrls@TMemo@$bcctr$qqrv
@Vcl@Stdctrls@TEdit@$bcdtr$qqrv
@Vcl@Stdctrls@TEdit@$bcctr$qqrv
@Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv
@Vcl@Stdctrls@TGroupBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv
@Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv
@Vcl@Stdctrls@TScrollBar@$bcctr$qqrv
@Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv
@Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv
@Vcl@Stdctrls@TRadioButton@$bcctr$qqrv
@Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomButton@$bcctr$qqrv
@Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv
@Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv
@Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv
@Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv
@Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv
@Vcl@Stdctrls@TButton@
@Vcl@Stdctrls@TMemo@
@Vcl@Stdctrls@TEdit@
@Vcl@Stdctrls@TLabel@
@Vcl@Listactns@initialization$qqrv
@Vcl@Listactns@Finalization$qqrv
@Vcl@Comctrls@initialization$qqrv
@Vcl@Comctrls@Finalization$qqrv
@Vcl@Comctrls@THeaderControl@$bcdtr$qqrv
@Vcl@Comctrls@THeaderControl@$bcctr$qqrv
@Vcl@Comctrls@TStatusBar@$bcdtr$qqrv
@Vcl@Comctrls@TStatusBar@$bcctr$qqrv
@Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv
@Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv
@Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv
@Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv
@Vcl@Comctrls@TPageScroller@$bcdtr$qqrv
@Vcl@Comctrls@TPageScroller@$bcctr$qqrv
@Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv
@Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv
@Vcl@Comctrls@TCoolBar@$bcdtr$qqrv
@Vcl@Comctrls@TCoolBar@$bcctr$qqrv
@Vcl@Comctrls@TToolBar@$bcdtr$qqrv
@Vcl@Comctrls@TToolBar@$bcctr$qqrv
@Vcl@Comctrls@TListView@$bcdtr$qqrv
@Vcl@Comctrls@TListView@$bcctr$qqrv
@Vcl@Comctrls@TCustomListView@$bcdtr$qqrv
@Vcl@Comctrls@TCustomListView@$bcctr$qqrv
@Vcl@Comctrls@THotKey@$bcdtr$qqrv
@Vcl@Comctrls@THotKey@$bcctr$qqrv
@Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv
@Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv
@Vcl@Comctrls@TUpDown@$bcdtr$qqrv
@Vcl@Comctrls@TUpDown@$bcctr$qqrv
@Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv
@Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv
@Vcl@Comctrls@TRichEdit@$bcdtr$qqrv
@Vcl@Comctrls@TRichEdit@$bcctr$qqrv
@Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv
@Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv
@Vcl@Comctrls@TProgressBar@$bcdtr$qqrv
@Vcl@Comctrls@TProgressBar@$bcctr$qqrv
@Vcl@Comctrls@TTrackBar@$bcdtr$qqrv
@Vcl@Comctrls@TTrackBar@$bcctr$qqrv
@Vcl@Comctrls@TTreeView@$bcdtr$qqrv
@Vcl@Comctrls@TTreeView@$bcctr$qqrv
@Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv
@Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv
@Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv
@Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv
@Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv
@Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv
@Vcl@Comctrls@TTabControl@$bcdtr$qqrv
@Vcl@Comctrls@TTabControl@$bcctr$qqrv
@Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv
@Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv
@Vcl@Dialogs@initialization$qqrv
@Vcl@Dialogs@Finalization$qqrv
@Vcl@Menus@initialization$qqrv
@Vcl@Menus@Finalization$qqrv
@Vcl@Imglist@initialization$qqrv
@Vcl@Imglist@Finalization$qqrv
@Vcl@Actnlist@initialization$qqrv
@Vcl@Actnlist@Finalization$qqrv
@Vcl@Controls@initialization$qqrv
@Vcl@Controls@Finalization$qqrv
@Vcl@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp21Vcl@Controls@TControlr19System@Types@TPoint
@Vcl@Controls@TWinControl@UpdateTIPStatus$qqrv
@Vcl@Controls@TWinControl@DockReplaceDockClient$qqrp21Vcl@Controls@TControlp24Vcl@Controls@TWinControlt119Vcl@Controls@TAlignt1
@Vcl@Controls@TWinControl@SetParentBackground$qqro
@Vcl@Controls@TWinControl@CanAutoSize$qqrrit1
@Vcl@Controls@TWinControl@AssignTo$qqrp26System@Classes@TPersistent
@Vcl@Controls@TWinControl@UpdateStyleElements$qqrv
@Vcl@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1
@Vcl@Controls@TWinControl@CanResize$qqrrit1
@Vcl@Controls@TWinControl@GetClientOrigin$qqrv
@Vcl@Controls@TWinControl@GetControlExtents$qqrv
@Vcl@Controls@TWinControl@Repaint$qqrv
@Vcl@Controls@TWinControl@Update$qqrv
@Vcl@Controls@TWinControl@Invalidate$qqrv
@Vcl@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__
@Vcl@Controls@TWinControl@ShowControl$qqrp21Vcl@Controls@TControl
@Vcl@Controls@TWinControl@SetBounds$qqriiii
@Vcl@Controls@TWinControl@SetParentDoubleBuffered$qqro
@Vcl@Controls@TWinControl@CustomAlignPosition$qqrp21Vcl@Controls@TControlrit2t2t2r18System@Types@TRectrx23Vcl@Controls@TAlignInfo
@Vcl@Controls@TWinControl@CustomAlignInsertBefore$qqrp21Vcl@Controls@TControlt1
@Vcl@Controls@TWinControl@CreateHandle$qqrv
@Vcl@Controls@TWinControl@DestroyWnd$qqrv
@Vcl@Controls@TWinControl@$bdtr$qqrv
@Vcl@Controls@TControl@InitiateAction$qqrv
@Vcl@Controls@TControl@GetFloatingDockSiteClass$qqrv
@Vcl@Controls@TControl@CreateTouchManager$qqrv
@Vcl@Controls@TControl@SetBiDiMode$qqr24System@Classes@TBiDiMode
@Vcl@Controls@TControl@SetText$qqrx20System@UnicodeString
@Vcl@Controls@TControl@GetText$qqrv
@Vcl@Controls@TControl@SetEnabled$qqro
@Vcl@Controls@TControl@SetName$qqrx20System@UnicodeString
@Vcl@Controls@TControl@SetAutoSize$qqro
@Vcl@Controls@TControl@SetDragMode$qqr24System@Uitypes@TDragMode
@Vcl@Controls@TControl@GetAction$qqrv
@Vcl@Controls@TControl@GetEnabled$qqrv
@Vcl@Controls@TControl@GetDragImages$qqrv
@Vcl@Controls@TControl@$bdtr$qqrv
@Vcl@Themes@initialization$qqrv
@Vcl@Themes@Finalization$qqrv
@Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv
@Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv
@Vcl@Forms@initialization$qqrv
@Vcl@Forms@Finalization$qqrv
@Vcl@Forms@TApplication@SetMainFormOnTaskBar$qqrxo
@Vcl@Forms@TApplication@GetExeName$qqrv
@Vcl@Forms@TApplication@ShowException$qqrp25System@Sysutils@Exception
@Vcl@Forms@TApplication@MessageBox$qqrpxbt1i
@Vcl@Forms@TApplication@Run$qqrv
@Vcl@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv
@Vcl@Forms@TApplication@Initialize$qqrv
@Vcl@Forms@TForm@$bcdtr$qqrv
@Vcl@Forms@TForm@$bcctr$qqrv
@Vcl@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv
@Vcl@Forms@TCustomForm@RequestAlign$qqrv
@Vcl@Forms@TCustomForm@UpdateActions$qqrv
@Vcl@Forms@TCustomForm@ShowModal$qqrv
@Vcl@Forms@TCustomForm@SetFocus$qqrv
@Vcl@Forms@TCustomForm@CloseQuery$qqrv
@Vcl@Forms@TCustomForm@Close$qqrv
@Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState
@Vcl@Forms@TCustomForm@PaintWindow$qqrp5HDC__
@Vcl@Forms@TCustomForm@SetFocusedControl$qqrp24Vcl@Controls@TWinControl
@Vcl@Forms@TCustomForm@DefaultHandler$qqrpv
@Vcl@Forms@TCustomForm@DestroyWindowHandle$qqrv
@Vcl@Forms@TCustomForm@DestroyHandle$qqrv
@Vcl@Forms@TCustomForm@CreateWindowHandle$qqrrx26Vcl@Controls@TCreateParams
@Vcl@Forms@TCustomForm@CreateWnd$qqrv
@Vcl@Forms@TCustomForm@CreateParams$qqrr26Vcl@Controls@TCreateParams
@Vcl@Forms@TCustomForm@AlignControls$qqrp21Vcl@Controls@TControlr18System@Types@TRect
@Vcl@Forms@TCustomForm@ClientWndProc$qqrr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@WndProc$qqrr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2
@Vcl@Forms@TCustomForm@SetParent$qqrp24Vcl@Controls@TWinControl
@Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage
@Vcl@Forms@TCustomForm@SetParentBiDiMode$qqro
@Vcl@Forms@TCustomForm@GetFloating$qqrv
@Vcl@Forms@TCustomForm@GetClientRect$qqrv
@Vcl@Forms@TCustomForm@DefineProperties$qqrp21System@Classes@TFiler
@Vcl@Forms@TCustomForm@ReadState$qqrp22System@Classes@TReader
@Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation
@Vcl@Forms@TCustomForm@Loaded$qqrv
@Vcl@Forms@TCustomForm@DoDestroy$qqrv
@Vcl@Forms@TCustomForm@DoCreate$qqrv
@Vcl@Forms@TCustomForm@$bdtr$qqrv
@Vcl@Forms@TCustomForm@BeforeDestruction$qqrv
@Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponenti
@Vcl@Forms@TCustomForm@AfterConstruction$qqrv
@Vcl@Forms@TCustomForm@$bcdtr$qqrv
@Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponent
@Vcl@Forms@TCustomForm@$bcctr$qqrv
@Vcl@Forms@TScrollBox@$bcdtr$qqrv
@Vcl@Forms@TScrollBox@$bcctr$qqrv
@Vcl@Forms@TScrollingWinControl@AdjustClientRect$qqrr18System@Types@TRect
@Vcl@Forms@TScrollingWinControl@AutoScrollInView$qqrp21Vcl@Controls@TControl
@Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4%
@Vcl@Forms@TScrollingWinControl@DoGesture$qqrrx30Vcl@Controls@TGestureEventInforo
@Vcl@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv
@Vcl@Forms@TScrollingWinControl@$bdtr$qqrv
@Vcl@Forms@Application
@$xp$15Vcl@Forms@TForm
@Vcl@Forms@TForm@
@Vcl@Clipbrd@initialization$qqrv
@Vcl@Clipbrd@Finalization$qqrv
borlndmm
GetAllocMemCount
kernel32
FreeLibrary
GetCommandLineW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetVersionExW
HeapAlloc
HeapFree
InterlockedExchange
LoadLibraryA
LocalAlloc
LocalFree
RaiseException
cc32140mt
@$bdele$qpv
@$bdla$qpv
@$bnwa$qui
@_CatchCleanup$qv
@_InitTermAndUnexPtrs$qv
@_ReThrowException$quipuc
@_ThrowExceptionLDTC$qpvt1t1t1uiuiuipuct1
@__exceptionAcquired
@setExceptionFuncAddr$qpqp17_EXCEPTION_RECORDpp4tpid$pvppqqrp17_EXCEPTION_RECORD$v
@setRaiseListFuncAddr$qpvt1
__ErrorExit
___CRTL_MEM_GetBorMemPtrs
___CRTL_MEM_UseBorMM
___CRTL_TLS_Alloc
___CRTL_TLS_ExitThread
___CRTL_TLS_Free
___CRTL_TLS_GetValue
___CRTL_TLS_InitThread
___CRTL_TLS_SetValue
___CRTL_VCL_FPU_Hook
___VCL_add_EH
___VCL_clear_EH
___VCL_init_except
___VCL_init_fpu
____ExceptionHandler
___getExceptionObject
___raiseDebuggerException
___terminatePTR
__argc
__argv
__argv_default_expand
__exitargv
__handle_exitargv
__handle_setargv
__handle_wexitargv
__handle_wsetargv
__matherr
__matherrl
__max_dble
__max_flt
__max_ldble
__setargv
__tiny_ldble
__wargv
__wargv_default_expand
__wexitargv
__wsetargv
__wstartup
_abort
_fflush
_memchr
_memcpy
_memset
_sprintf
_strcat
_strcpy
_strerror
_strlen
_wcstombs
vmprotectsdk32
VMProtectGetCurrentHWID
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectSetSerialNumber
@@Unit1@Finalize
@@Unit1@Initialize
_Form1
__GetExceptDLLinfo
___CPPdebugHook
Name
.text
Size
21KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
27KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.edata
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
53KB
Virtual Size
56KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect/Licensing/BCB/TestApp.exe.vmp
- SHA256 d0738b66c4fd955e9b9fa5e06b3ac541e1e37e5e4af24939391242a4ed873515
- MD5 d272bad87f4b48b364c5fc683ebd0c43
- SHA1 e7028545c40b9e7944e1d951a7745cf061ed7aa1
- SHA512 ba5872739e597b339c0c222dfb2294924c5e08eef4ea076dafb3f0ae088eb71c44892f9eb83ceaf5f8ed346ebcf3394bf335ae685295a5c5b8a0125995f7fa8c
- TLSH T19F51E700F5ECA825232B11973F864CAFAAA0D378852AA50874B862A3777CD250B9719D
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/BCB/TestApp.map
- SHA256 95878d6e5f2006270547e3a55864e8b8a364a94e367cf39da25664c9efb2161e
- MD5 0c9ea58e4ccc1daaf623e941ed138884
- SHA1 5ea14cbbdce364e0307dff27313bd3bc219f4007
- SHA512 106d938e0341435476a27bcd1463690e0a7d640f9f797dd245ce7158ab47e99946b55cc2ec862269975944ff9e71762a87128be500d2ef5bcf4130178d0507dd
- SSDEEP 768:7RPxdG/d9QY3P3T3GoUXMhD7h3T3tY35MzWwX8x+Bd1LNiy:1PxgDd/TGXM/Tm5MXX8GNiy
- TLSH T11B23677021AFE0D1D027B2A1FAA1FF958065F4A39CF2B84633E8271555571ACDA33B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/BCB/TestApp.res
- SHA256 d2a39b36d2ea96c650e015da5666045773d285dd610b66f32f783b66ca12ede5
- MD5 898b7d735f370a06f87ff9ef2bc48905
- SHA1 9fd64bfea353ef474a91c7339528f49821b00e45
- SHA512 249276a20fdc6764bbd9e29635fd1cecb873edf88b68a72fb89645cc7b83e2e6e7affa3687d2316760c442277edcfb9c73f781103b6c177cc4c4975dda3c1447
- TLSH T111210E0293E49616E67203B129F2D362D6986E230D6E0BDE308C275F6F35507C6836B2
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/BCB/Unit1.cpp
- SHA256 e1d4de9491ab0f1755aeb873da899c8ba36207795f9d08fb0998944b050ab3f4
- MD5 55f47c162be125211eafee97523701ed
- SHA1 5cfb7bee6987cf7eece93103350a48785f25db10
- SHA512 5e1c228e71980a530d3770798cafd15d0f5bcc8de6798f1e5ba647e85e0aea4cc108009c7570fead81fa245b935458f1dd21ff7454ee4892b0b425f2730b488f
- TLSH T1AE71FF7A3D11A05BC090F31A23FC4484FDC1C0B97EA09B6A73E8835224B752D9B7DA95
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/BCB/Unit1.dfm
- SHA256 147606256184bf7a6b015fbc06a6ac1202a7f80e44c263220a589c5b8202fe13
- MD5 53671537178dc3fd91b6a10f0f67e07f
- SHA1 32c6a23a7a26f44f222ee66cc8316345fe8f308e
- SHA512 633ea225bd9368251c640d1265e745255581d186a01aa933ddae146e7638c34a97191896523345cd3e552bbfdd9e9d3a8236765993c3d6245438e419d3746a3e
- TLSH T1E331ABBC5314B2045DB6D20744AB1E8ED0A93693804718357683CDDCBFF2B1977D6296
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/BCB/Unit1.h
- SHA256 62bfc6fe615a6f082b8680b3542e7ee4443dbd3b82695b29c22400756aec89bd
- MD5 433937c3e14af878d079c480b2346555
- SHA1 74b87dfde233c5e4d160d89f9c4667bbc959313b
- SHA512 a4ffdc84f13aacf77ef41990b56a8784c7393134c61f7e482621ac52f6b18ef122c0cf059c552e7d4bb52dd7909e727c509aeac90987fe461c53af4be8e351e9
- TLSH T11B1190B83E4C80728010F238C72194B2D29EA1308BC6A91EB17F54D28554160335F795
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/DDK/MAKEFILE
- SHA256 0350066fc7cd89f3db46317311dec536364555c3d60a9c39226cac5a7e53531e
- MD5 277517b4ea054b293c4ed298ff2c79eb
- SHA1 f0923275b362e3a05ac77fcb6d3a12e18cdcfad9
- SHA512 b0b0284287baa952b353e255981ab5ba2782ad2e64cb15a8f2f2b8d096b57cb760f0e926d0f43f0b07a701e2e6dcec7dd40e747b8ac1b89f517e088680297bcc
- TLSH T1C6D0955717F8F931407071006F17379B725260BCFDDB923850107469336B4358155EC4
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/DDK/SOURCES
- SHA256 b9bc55cd4546f643d17a7a12bc22eb0baf690e0b8875c2e3d51fe51db881c037
- MD5 9158c7f41024e2a06d6cbdd3bf30f0cc
- SHA1 b6ad9633f700f31052aeaa802775eca31a30329b
- SHA512 4823abadbb857f1fcf032cc20f8514fd284ab47fd66d4e3dbf47a69742b74ea9b6c64596812308e5ca349744873a7f24acbae3c0c0b25088b99230d76003c17c
- TLSH T15CC092B6B3317B4730C756CE7C49BDAA594A4A5048AC88BB06EC07B59BD63EB6690013
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/DDK/TestApp.c
- SHA256 6d17b5d6aba656cdc264d62740c6fa400762efc0f89b5241ef0929b88beadeea
- MD5 612f5294a928e130c3295641af75019f
- SHA1 fa3167346dcc873cd56d8636e019aeddce3f227d
- SHA512 e6fa2d75926d026e4316b6a92c2e3aa768c6df523c6527ee1044a85db5189968688717249d3051f754f88d781200afe7773d6a1b89439ecb4f0235ff91888fc1
- TLSH T1FD51EEEB0812A8DF94D13261113E48E83ECA86743BF2D2656180E256717F25C973C7AB
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/DDK/VMProtectDDK.h
- SHA256 e98615fe5506da30061c63a3c6a3b1dfd23892f783d1aa6a9e4fe891a59f2283
- MD5 28f7681c7317ba191dcc8bf36a6f6455
- SHA1 917c2fadc5e6ce96d52d0a2ca20e5436ec83d90f
- SHA512 6fea13ca6a2c55817ca968cec02df016b9d66f99f1dea71734d9de02170aa1817e7ac69f631810d5af25eccab298e4df89f5a2e59ec9ffda16247615c08bd41f
- TLSH T15561BD410D01306ED192D7F56737DC6225ACF12335F6EDEB220A24151BC354DABAEAAF
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/DDK/VMProtectDDK32.lib
- SHA256 1f81028312343198a11adee92d41d677458c2f1199e9562119858f64690c8d9e
- MD5 da56d6b2fffe23163f158c9d7683700c
- SHA1 ed812537992d722095c236db0427b844043c1f15
- SHA512 2257cec02e592d841a0df5d14c769a655301e1950b3d91ae555abfd51b3f307e3750d7bd11b20e3c25945d73f046184958333ce3551d4d69fc2e8430addff656
- SSDEEP 96:Skm/+uYlVlQKU3v/hknm/KuK7KRulo+WlqnT:tVlE/h3TO
- TLSH T175F1A8378C12BD1FC4FAD4FAE696DCEC39AC304A22F2D127751C448593E50AD7A9A04B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/DDK/VMProtectDDK64.lib
- SHA256 1cfe9490aa9991d1327260607e97831f4fdc172df5a182a8f7ef6bd59a0ab75a
- MD5 02e457533b7776d2ce15a3a3486b0a7e
- SHA1 ae1d39b93035857b1a6e316a7842b59a64f92f9f
- SHA512 84b8178eaa6f8bbe9dcc75b9c5aa92a40b1a27627712de74e2ba6cae5663eaf0ad1a682b6fb467473420e242dda2042b6e63f57815f3a257cb124623f2a741d8
- SSDEEP 48:IZj/k5RLRzRCRXB6cI15lXy/F/CRcRj15T1sRLRyIBrjX4nKryAOFsgKer5PKylZ:INkqBb1CrMnKeKwKyCsuYgJt0
- TLSH T182E13A399C52BC1FC5EAC0F5AB25ECE93EAD004212F1C55B7C4D1A5187A236F734628B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/DDK/bin/i386/TestApp.sys
- IMPHASH c1335faeced066df9bbc6e5efb7d89a9
- SHA256 4cec6e3d2f9b7ebae6f4add1311f7b7a37bc29964df0495ae32f8820ce57fcef
- MD5 240e80f81fe07673cfaa2602d9642a3d
- SHA1 84440e54d4ad9357759b774f062130794bd28358
- SHA512 fa5e64ab00ec82909e17c5d912489b69987d3d593ae321123583badecbea85cbd42e8ad85b1e6ab7ae4231d7c89ae2655d62b9f12d0bff3a5c0f83ed0ded22d8
- TLSH T104817402650470A7C8E931F1216FAD25AC85CA7217B3C3967F6162577836698BA3838E
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
3262
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\DDK\bin\i386\TestApp.pdb
ntoskrnl.exe
KeTickCount
memset
ExAllocatePool
DbgPrint
KeBugCheckEx
ExFreePoolWithTag
vmprotectddk32.sys
VMProtectGetCurrentHWID
VMProtectSetSerialNumber
VMProtectGetSerialNumberState
VMProtectGetSerialNumberData
VMProtectBegin
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
256B
Virtual Size
144B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
128B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
INIT
Size
512B
Virtual Size
452B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
128B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=1, productName=Unmarked objects,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
VMProtect/Licensing/DDK/bin/i386/TestApp.sys.vmp
- SHA256 b63086d2ac58f3f25a268eca486133ee1e369ff960e2dfabe5fcf3c4c9019ccb
- MD5 340ddde18074d4f4b55c6288656d2aa5
- SHA1 7d3606449f6388af1bcd05d91a4eb804835a0fa0
- SHA512 b5faeebdc943552cea228db67840a9773c7786b686b82e2fb4a5a3fca8a060ed2e7ff258000caa95c068589c19bd2b2fa72f1f94f9ef568a4bd41c33b670f0a9
- TLSH T1EC410850B8F41C26276F11967D478DAFAA40836D862DB64830BC63877BBCD360D47448
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/DDK/make.bat
- SHA256 fe8ca43b8b675828a8718c8f9816fda173c32256b477dd5ac8ca7399dd4e5116
- MD5 b29e6212257853433772d102f750f5a6
- SHA1 64ff87f17741afccbe1ce398fa3c10d7599122a3
- SHA512 240c5055a1129c8b8989042dcd4f0dbf1c15be692f78c5234167209c565f19d4a9b930245f337057617666c1046578b72d6b07fc37bc4b98d8f260c0062db8f6
- TLSH T1C0C08C9F0903408226251B8FB3090D0602FAA0113265C94E36132108BEA8ED67F80EFE
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Delphi/TestApp.dpr
- SHA256 eac1a1ecc75b521da0f391828b3681772b573c00a26f3f6608a0f43ea41ae03b
- MD5 966988f3a281a11c189cd88450540215
- SHA1 c75b8ef7b8b5be8d46272ac5a126070390887f73
- SHA512 7d906579f9b373f79d4135d9cec31ccfb72078705e12230fe0506934f194585f3cc531fdaffaabb8f2605e9ee519769c7d937d704bc8c89a6938ed072b9652ac
- TLSH T1F5D0A7D717EE40C359F734B3391E98816062C53C4C80120934A99896840666DD343355
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Delphi/TestApp.dproj
- SHA256 dd74cc680b0faf11df6d9372dfcbcc2aa7d9f0f394c7b66773039219a8065925
- MD5 0e771a636fa41ddf7708f0f6a5da1761
- SHA1 68800286948293c7eb9a093ff1e40c0c7a6ddd06
- SHA512 0833b05f16748e7c819b71ab066cd4db2f8cb50cec034db10ab5ffc2db3edf017564dfc8819d1177dbfa2639ec0c4af14c53af97d277adbd351ad90795d9fc10
- SSDEEP 96:tiz/TGfIOt/ClGxOBNJ7LQB9DYE17JViLvm75H617GC:4z6J68OkJ7JViLvm75H617GC
- TLSH T174815724798C2DA882DA527F4E363440B1BFEFBA16FD9818F5F5B13B635271D2002971
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Delphi/TestApp.exe
- IMPHASH bbe6bbe2bb17a0cd01758afcc31fe177
- SHA256 2da43ba896fb35d40555cb641a94b1c74c9568e461591d31cb141bc834336eeb
- MD5 047322602082c74caa337004efbc72c0
- SHA1 8671d39e04ad3b4c005ee7c1b2de0c43c5639bef
- SHA512 12fd11383771da4add1a6b9cd3186d9c854ab35abcbc5209e844db8e3bb76777fb52844b2d876df1ca7e858e54216ff9eaafaf7005b18f95832c440ba496a61d
- SSDEEP 12288:OrySorhhzNWWJVNwf/WGXJ9yipE64AaSoJ3O945BGSjSqjOpeFCNMM988888888R:iKhhMWJ/A3Z3pE6erG6BGSjSqjOuCZ
- TLSH T15F055A13B291173BC026D63AC96BD6A4DC3BBAE02F965C575EF49C4C0F39281283A757
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
724048
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey
user32
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TryEnterCriticalSection
SwitchToThread
SuspendThread
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep
msimg32
AlphaBlend
gdi32
UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
Arc
AbortDoc
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ole32
OleUninitialize
OleInitialize
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
vmprotectsdk32
VMProtectGetCurrentHWID
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectSetSerialNumber
Name
.text
Size
697KB
Virtual Size
696KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
20KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
1024B
Virtual Size
670B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
60B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
63KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
53KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect/Licensing/Delphi/TestApp.exe.vmp
- SHA256 4c8b398503e15595bc5e859ee3b114f621954870cd8e792b090a5cf2b47e6ff3
- MD5 e8cee40a6ff0aeb3f36ae408fb8e8ad8
- SHA1 1629b8128e59b48aa4ba98cc39bd7af621215e6b
- SHA512 4076e58795ecd4ed9bc849df9aecb409c32ae1b1d6e0457223ff1f0f8b675c26bd6a3fd94dd1b364d07c581fd8a7d2b7df9b1312115375e083bc0080a5343e15
- TLSH T1D051E850F5FC2C36236B01973F864CEB6D91D368C62E6508747862A777B8D260E8B1AD
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Delphi/TestApp.map
- SHA256 d030cda2666cc8dc3001ad66bdfe1d8f860789fd36666fa110785916442740f9
- MD5 ae9c101874eded510d5ec6608200a51f
- SHA1 1c36071d37dd15982de2c66b4c0521ebda94850e
- SHA512 1f3ed46db32fa1a08f3b9d2c52269d7e0cc974715388604a536c25441e593db0fedea37415ef631a6c4a184cae0e09466d5e667fb4f0c1082f7f032b9161e67f
- SSDEEP 3072:yH3Vx/jjJgD1QLEr1THCQhHzjRreF31vSVtQNBQLjoHXNOlcuWjRiQt/yyQjm8PC:LnYMcqc
- TLSH T1C7C44374A8AFD2E08853D556FA56BF52445AF6F3C5B20A1B339CBB08638505CCD9332B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Delphi/Unit1.dfm
- SHA256 fa4db7abb23943032ca3a9ba8ea094be8fe0c4849d243fa49725bfd02a212828
- MD5 210fb70b5f5f67d6df3195ae25a9612a
- SHA1 adf459faf8e9b3aa95e3877a09495acea9168532
- SHA512 2b180e3e1fa60e1826e52639e3e76f2e1aa0f2b5655efab01933e06b1e812034ab41cb7bb72a21c6e955705d4b57d98beb52fcd594b92863f7a23734c97a80c7
- TLSH T15131ABBC5314A20459B7D10344AB1E8ED4A92693800B18357683CDDCBFF2B1977D9286
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Delphi/Unit1.pas
- SHA256 2ab8683e0b7830a964bbb0d7fd1f51b7f4ce638e93986bc86e93b20b8b8d0aa9
- MD5 9b7fd3d70ee9fce83e76c2b3dd4d9687
- SHA1 0a1bb36a730427c90d02ee0c07a6f4ed187b1c29
- SHA512 7850cd44a98753d50a0953ff472577bee09be415343a935fc63dfb4816b29edc32454304ea386135908ab0ad41abba565d6d5cd0facff6293a93f9021051a1be
- TLSH T1EA71E0620620A1BB88F1A165331A54D1ED80C1227A5897B671DCD3460FBBA5CF6FC7BE
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Delphi/VMProtectSDK.pas
- SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
- MD5 97a96877fc2c184b0e73e85529b34822
- SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
- SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
- SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
- TLSH T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Delphi/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Licensing/MSVC/TestApp.cpp
- SHA256 8aaf6a441d02b76568ad91e8b85ba007c772ae2c14090b1cc1f569c8522ba4a5
- MD5 4157347aa2bcbfcd01dbf0f0f285c8fb
- SHA1 67efad477a2e2580342a6a7ae25356553179676b
- SHA512 bfed77c52a7ada4628c20080a54524b81d98bba53bd71a1952b52a4361886676bf7ff9431c5f4c606ba75b50be3c8916835ed4811347c00a43697d6f3e5f0432
- TLSH T167815417601EB9BEDA7617202636B6353C3B858464A3A062B1497329F7524E8D238BCF
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/MSVC/TestApp.exe
- IMPHASH d459861a2d3c1b915fecfb235adf0ae5
- SHA256 8a4c9ea04610c4f6bafc03d59c55acc2fc5cd5db696e3c5023dfbe9666138a10
- MD5 cd4574367869ad8be024572b65312f19
- SHA1 a416742807237b0c88f461e4c5e37b093444b40b
- SHA512 e3560a4e5b142f4de4f2cf0a1ebcdbc2b9ccb0d289f4963e94ce7a4d233c395e644a0dcb4207a82dc5af1da84088c9df18feeef765858e9e52f3e4e1fb983d05
- SSDEEP 12288:ZSgSbHYUVii3uuJbVS2lwbVsbnNfAMmcyfSifU:sdc2lsVsbNYMmVfm
- TLSH T152050801B7A15018F9F716FA99FF3068593DB9E01728E0C762C46AED9625AF0BC31B17
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
9536
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\vmprotect\examples\licensing\MSVC\bin\TestApp.pdb
user32
GetWindowTextLengthW
DialogBoxParamW
EndDialog
GetDlgItem
SetWindowTextA
MessageBoxW
SendMessageW
GetWindowTextA
SetWindowTextW
vmprotectsdk32
VMProtectGetSerialNumberState
VMProtectGetSerialNumberData
VMProtectGetCurrentHWID
VMProtectSetSerialNumber
kernel32
CreateFileW
DecodePointer
EncodePointer
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapQueryInformation
HeapSize
HeapReAlloc
GetStringTypeW
SetStdHandle
IsDebuggerPresent
RaiseException
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
GetModuleFileNameW
InterlockedPushEntrySList
InterlockedFlushSList
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleFileNameA
GetModuleHandleExW
GetStdHandle
WriteFile
ExitProcess
GetACP
HeapValidate
GetSystemInfo
GetCurrentThread
GetFileType
OutputDebugStringA
OutputDebugStringW
WriteConsoleW
CloseHandle
WaitForSingleObjectEx
CreateThread
SetConsoleCtrlHandler
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
advapi32
SystemFunction036
Name
.text
Size
605KB
Virtual Size
604KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
143KB
Virtual Size
143KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
260B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=241, version=40116,
count=133, id=243, version=40116,
count=24, id=242, version=40116,
count=18, id=259, version=23907,
count=45, id=261, version=23907,
count=17, id=260, version=23907,
count=2, id=257, productName=VS2015 UPD2 build 23918, version=23918,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=102, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=255, productName=VS2015 UPD2 build 23918, version=23918,
count=1, id=151,
count=1, id=258, productName=VS2015 UPD2 build 23918, version=23918,
VMProtect/Licensing/MSVC/TestApp.rc
- SHA256 07cc4993dd7d391c8799881ba783d304b6a147a11471bcc61f33ec2b00a470f4
- MD5 940a01b5e7caa1d991072712a44bb0ad
- SHA1 1c27a8eb03ba4c6d46e81eb85fe71c3804b00197
- SHA512 87916436edccf1b52cb5e603a000f93ec225568e89b9d17e271d83e36f9249ccdf41baaf91f6c1a397e8dd4b77d31fd1f4ccb98f092ad3a4d07a9b901b700e58
- TLSH T13D510021488296338B30F0F26D017F1AE22C5A3F5A494724B25DB6EDDF33969139C4AE
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/MSVC/TestApp.sln
- SHA256 d5f97ffd30ae1374ba54121dfeb177917a4649ff9db80926b5044595837ce107
- MD5 e3a8b772f8f3bfcfa9f16f4b6f19b239
- SHA1 954a193835940c3f42fc651a40d6736f44aff5e3
- SHA512 52ae338c4b1ff62100630fa25865c1a94998cf107a953755763b2be4d48a7cd1569c36b2ce25d016b7a0a2dcd787e520e6f7e390583eaa0ac287f331eada1ac3
- TLSH T1D0113A98201FEFE12A86059FE5F84DBAAD3342A181984A3C045190FCDF16A57C21758B
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/MSVC/TestApp.vcxproj
- SHA256 21a3b1fc21ea9cdd168e87298d58fba70476e2094e3bf58a5a63a1735ac19415
- MD5 982dfc79b75a1049d32c9c15f859ae69
- SHA1 c9ec87866d778b78618c78025e309e11fbe4f9a3
- SHA512 447a5dae65d612760361077ccb55a162ab69d4f0809375a736c9b88135e064c210fbb96d07848db93b8790fae5666e8f52b77f89a3e41bc91016ede9a2d41b31
- SSDEEP 96:i0/z2scfNPRtTCyaLDyaLDmVynp7uZ5AXZAl8N:z/zSvJyp7F
- TLSH T176C1EB55A4C46C0A817B8227E6EB9982EF31D3830D594C6CB9AFD35B5F735847207B32
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/MSVC/TestApp.vcxproj.filters
- SHA256 46ada655cf451d1baa68e08d529ed0e15a0787236c50ccc12ede1937c12f76ce
- MD5 c42b0bb136509355114e69100e7160ab
- SHA1 8b6630f9b25d0eecb1a12d56e9e6bbc6a3de368b
- SHA512 5c9397fb0400acc6cb95221d1af062bc98a3b6a059805e4090ebbcef8025cd659da1bd7ad128ca23fb779b5b14dde38ee17f8b56dffc211d9104b067bfe68119
- TLSH T14B213B31C4DC3B4C6032995BFB84DD15EF68B3E350921149B6A9E1076FF2619D227A68
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/MSVC/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/MSVC/VMProtectSDK32.lib
- SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
- MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
- SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
- SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
- SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
- TLSH T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/MSVC/VMProtectSDK64.lib
- SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
- MD5 32599fe22a118732b9261e1fcd4f94fc
- SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
- SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
- SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
- TLSH T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/MSVC/bin/TestApp.exe
- IMPHASH ae2c24d912079246eea215f597cad7bc
- SHA256 27040cc4bf7feeb79941ed94fa06628a0c6095430cd57f1dca08180e0cd77b44
- MD5 34a97d2dedf175eb29b84299624e0b4c
- SHA1 50d73f9e0bd7c06177f78a8bd0364201758de982
- SHA512 6a40cb75dfe43d1f4d257fdb5ff830a486b0dd5407bd00e381d6d541d9f7ae9d05b5e6eb7593dd2101776dd913c48eb41385d4ed268d6e72d092750780f42436
- SSDEEP 768:6jfSdGtUyIzKviN1myn7Kf7ip76FEhaSHhgvt7kuyCEDDXnVPK9LD9jmQ:8fVVYKaXmyO7iAOa5vt7kBVIDJ
- TLSH T133335C1279E1C072E4A215300970C7A29B7FB93396B5C6CB7F4812BE5FB17C09E69366
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
6467
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
EndDialog
GetDlgItem
SetWindowTextW
SendMessageW
GetWindowTextLengthW
DialogBoxParamW
MessageBoxW
SetWindowTextA
GetWindowTextA
vmprotectsdk32
VMProtectGetSerialNumberData
VMProtectSetSerialNumber
VMProtectGetCurrentHWID
VMProtectGetSerialNumberState
kernel32
InterlockedIncrement
FlushFileBuffers
CloseHandle
CreateFileW
GetStringTypeW
LCMapStringW
IsProcessorFeaturePresent
WriteConsoleW
SetStdHandle
HeapReAlloc
RtlUnwind
GetCommandLineW
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
HeapAlloc
RaiseException
GetLastError
HeapFree
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapSize
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LoadLibraryW
Name
.text
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=33, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=14, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=90, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=87, id=1, productName=Unmarked objects,
count=2, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
VMProtect/Licensing/MSVC/bin/TestApp.exe.vmp
- SHA256 9a4de398129e940f2dbb735260b9d1b31cc5045f2ba6cd375f723a81c13acc04
- MD5 3e3d08f8197f60b9578f4afaea36f614
- SHA1 468c66e3219088d0ce47ad4a97cd6dc648775d32
- SHA512 aac3f2006736ccb4503963f952d8f443c0c817ad38e3c4ce374d89f762499587a7af3e0ede5b8aec6de0461fff3665b2eae4758dab2240d1e93b4cc370eb250b
- TLSH T1E9510840B8FC6C35236B11973F868CAB6ED1D358852F6608787C52A377B8D210E871AE
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/MSVC/bin/TestApp.map
- SHA256 3156299daa688ce50aa56de9c8486cfd37ce4d3715abe25c7d8a312bdfd834f3
- MD5 1473c4b46794d130c7eb676f23020ce3
- SHA1 0ed8efa6a2fe198082993608df2682286d9db697
- SHA512 ad503fac9b087458de12b74d45122835a3ee574ad9be35aa961f8c8518b8862f663d455f878a99a9120cb6c72e6a5f5428d557eb9944c540a2a01a866e1e867d
- SSDEEP 1536:K6kuaubYnKQhX6SzTQsybNhKgMQDvsHxrv62NPvc+FXyb:K6k5ugz0sydDvsH1v62NYb
- TLSH T14963273130CEE8D2D14D6682BB65FF68E149F41341D206D371ADA7C1E3EA39AA65E40F
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/MSVC/bin/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Licensing/MSVC/bin/VMProtectSDK64.dll
- IMPHASH 1851ff453adce0cef5274e320d5bed3c
- SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
- MD5 db4f1a1406d292162a3b99d1fbb74822
- SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
- SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
- SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
- TLSH T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
8864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Licensing/MSVC/resource.h
- SHA256 be276546e4707df7945f32244edbffc9d3867365344a208580bec2c6c2260188
- MD5 1796d5d70135fcc7fc83f34687d0b8ae
- SHA1 fdc70a005f3dda3549dddfb800500635071cadd7
- SHA512 6b9f35aac91ecdc683a73a46e62486011cf0ebaa3fd00fea7bfb935cd1c279635d95f968514c724de0c9af2671ed95bfe73be6eaf56869fc7514d5a54aa23097
- TLSH T17511D22D0CC894A7A878F1C500598702198DEC6799A886EE32CC6C9CAF2611113FF18F
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/MSVC/stdafx.cpp
- SHA256 7984b34b315b31cb55894b0e97f3d8176d2e7cb321755605afbab7654911773d
- MD5 8d5aa277c51e9ff821f340c97431e2d4
- SHA1 0ff597390405911258d9b7ec4ea620e98034a241
- SHA512 fd2151290e60fa3fd50de68aff72e24bf0dde4d9ac5610dd14896d129b1554c7d979222cb5e92c8cd5b1f630569d1a30a867c926fae59901e05a6621c0ddb3b7
- TLSH T1C4A0220088380000B08020C8B000CC30B808F2800B00008C00832AE800288CAAB0220C
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/MSVC/stdafx.h
- SHA256 ca63f206b8b2e44afb5228df0e14d85e55a4a65933fc240ccb0ad9a01de0401b
- MD5 b442f65fdda7276e9b25fee8ecc882fe
- SHA1 84ce3728f1ba97700344c3daf0c1f28b19fddcd2
- SHA512 0503105a5d446d69fd88657251a37071e533aa72867aa64a848aa5fe2bf6687b65c7d97ef194b2c0d001a0dadac57d18f01483e375911b978e34622843078398
- TLSH T1FB21B101DCF8919185B014907885775BF68D361306982BEDAC17B4993F5B00F43DA9FE
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/Form1.Designer.cs
- SHA256 44b0daf302cd08dfc7f84deb642beb3cd8aecc9d5234398947e274c69f7f76cb
- MD5 45188230b275e44b3ecf6feabe5963bf
- SHA1 32f1a08d1adfe8dcd5692e3b663e64423e00b834
- SHA512 dacdaf2252b27e21ea9388e2cb389c9e63063b4c8ba67868b5e54a9d80c068ffb591031f7f6bd2e2a0bff2fb1fd5d2e6139646f8f1959a400a426b1b2b3767e8
- SSDEEP 192:swa+JyOYeUJP+meUgrcvmGwfPlY1GqwqtumUwv0KseUd+byzc:sw1JyO+P2r3PWHtZ0n+bEc
- TLSH T135E18974436E8104D9B1718C8F0A96D0ED65823B7926ED6CBCCF4AC0DF722345379AB9
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Net/Form1.cs
- SHA256 4d386062471b6b3cb8af4ebddcd5f3017252630683b5dfa86a7473dca4493b0c
- MD5 4af31584ef36e1a45fa10499b0290a46
- SHA1 a3547a277ef15b72b04cfc36eadc278f6a8409c3
- SHA512 2e8cfb290fd7da7488f9a1a0ceedf56a90efe050c9874f16358120147b7f8ff03bf487efd2c6d9bb54e3e4cd735c70164ed569bda646db8739deb40bc317bb99
- TLSH T1E351D11812353EAE947231BAFF126C76FDA150370D7A630379ED84458F35800F269F99
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/Form1.resx
- SHA256 7263987e93baf4088e047f82d73a78d628e18bed376a1dad0797a8b87d64b068
- MD5 fc75f378d77f29ee452970be2bf081e1
- SHA1 7fb71214b1b7b0e83d662ccb61c088ab9d9bea28
- SHA512 c15381cef0eb145a1234a01f5db35625042fd0dcbf9a4f909819cdac4cc3d16e9e5f1d778135e4f181ab47d58d51a273acf016b57e38d71bb372f896b2b565ff
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT2+0qSdvabvDBwbjBu3FqvA:KjrbLPD9sLvIzSvKgIqUyaV
- TLSH T157C12045B1C0DD260FB3482CE6527988FBA8923F02356C50B4DCA61F5F72885A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Net/Program.cs
- SHA256 d80b1a72451c1e6f8001c1febf33fe5bd25e65c6c36718cf266e5dc263ae2ad1
- MD5 3df436d7dddf6fd44d552abda68318dd
- SHA1 e887a6f579a41209389bccf9428984d13d690682
- SHA512 8952b8c15759ec65f1e7058d21807aaf5d66d36c33e26f3f1b7083bdda83b511f95cab45c168a4db3bece2ae266af7ee237b85da99321c77d429c7a9b217732b
- TLSH T174F02BA5315DE3940EF351F75715D0C8D773253F4AB6B410B46D0A41CF36045433AD01
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/Properties/AssemblyInfo.cs
- SHA256 07ea7af5d9c4b57e1cb65f3f8556b5d1d4edb71a6eb5d3f998444b4e809349b4
- MD5 51adeeb4596f9759d8870ef725854c9b
- SHA1 58f3fd732a695bad7819460e776debcc8415b415
- SHA512 2edc74d50fb32e91804fcac075930c8a667fdc0e66af6e832d0cd67e51375ce756409c00a9acc535c7b76c18f315d8b4ab565a4cc530fd21c3f40cb16b596cb5
- TLSH T1BE215C2D6741A37E8F510493AE6B75C583BD636892FA0C0529B8B453F301B7843A99BB
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/Properties/Resources.Designer.cs
- SHA256 665bc730e6e2528c01381064c4c06251a487096bb8df7712c3d34a90824d6e74
- MD5 0c4557f794fd0efd4811f426828d1489
- SHA1 20f201e98f4ae43838e4e150d57bf84cc58682f1
- SHA512 2cb823ffc7dc36379bc76b6f2d3034b7a3ac738d62d81f1b92e3f78437463c98295f29108c136c6684ce0e6085ae4bc02d06502e3b5c50f5c45326d4ff56ae47
- TLSH T12D51A8B71F95C1334835D88B8B01F841CB662123CA7CD574B8EE02640FB739443AEEAA
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/Properties/Resources.resx
- SHA256 66b5ebd1b0fc73f041ba669ce2184f6f471d5e3524efa34ca31233e9f5395262
- MD5 0cd8c971317d19bbed44757809bcb92b
- SHA1 47b15748ecc8e952c5935170090db7c269ce4b4f
- SHA512 883dba84bf7daae3ea49f9d54c13dda4f125da82ba63f90eeba0900602896ad9492a0adf7b69b67d838034090af20926af5c2934797afaadb38aa069786c1fc6
- SSDEEP 96:fijrkiK5k5LPXbac9m5Lv6FzSvd4gIRjETUT200qSdvabvDIwQBugqvA:KjrbLPD9sLvIzSvKgIqUEa2
- TLSH T17FC11245B1C09D220BF3482DE6527988F7A8923B0235AC54B4DCA61F5F73C85A7B33B6
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Net/Properties/Settings.Designer.cs
- SHA256 3d087aac697ccbd34bcec6fa52c8c9cfdfb3d8b2d8d672a614001db00120b6c5
- MD5 dea91091bb3a8a72624c80dd70b3056e
- SHA1 3467671a9967520994d2ce94eecf62e71f448eae
- SHA512 2ac8eebda35e83931e178ac3f24c28f36e81a083f19c9108b5f1ebcf24684ee7292d60b6416094dc3edc80d8b4bdec0134eee3939d5927aecd9cbba2e6d21124
- TLSH T1D311CCF62E9287370672E5DADA05D163CF32522BCB6E9435318C0205EF2654483AEF99
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/Properties/Settings.settings
- SHA256 f6a4290723520caddd934b8800319c7ca6cc7eeab647059ec89b7a13b1513265
- MD5 8c0f00d7d9b0046695a0255f1b11b061
- SHA1 5e1d04de66ffcc5dfd813530ab6992e6daaae417
- SHA512 a95c07dc3241b7c9f37b7f0a5c143c9c133c3bcbfa16e4a689cf47f45b3e9d0ccf5c965143a6848237e7a9fa8deecb89837dc12b12fabd8231fe94f3ccba26aa
- TLSH T1A4D0A78994C8880693313970F468E13C91106757046A95647164784F15071D612D35E7
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/TestApp.csproj
- SHA256 ba431509a06e2fb8f5024682cff0334fcf3c8e1767d39c7db80ebaf48c6d10ae
- MD5 d525fe57bf7547ce3afc20c0920bac0a
- SHA1 514a8d7923aa4676405b3f0f2d98f8c2c1d74a09
- SHA512 510bffecb4b99d82de9b1a2be8fba69ac22be1680d782d0f78a643f48deb574ebcaea9173b726dd26518c4da8112bd4ee81a53811def15fc373e7c35456753c5
- TLSH T10A710234E1DC6DEA03B16172D6A3AE01DE68A3E314740868F59CE64B4B72A941247B7B
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/bin/TestApp.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b31b907c41e4a8d6e160ff1cab2178a05155d38aaeae87482103401b42f1c9ac
- MD5 717506624a3cc77fb5b3cda9df3e9523
- SHA1 68b6afcdd7e1f9866de18b1f8ed19a2233d8f28c
- SHA512 b00f7f30f6d3915c1bc6cb0f827808d420411184daa73058c64729344abaa2942146887df57978811ca0f24f59737ee7d9cc9909bdcf3a1adb7b449647949e7f
- SSDEEP 192:lxkUcadO6Vy49K6KLc+IPjSGnJJO95edM+E+je/a7m9lcujg4c:lx1cgO6Vy49K6KLc+IPjSsJJOidMM6/f
- TLSH T16732C455ABFC9727D4B627B668B23A400B72F6564836DB2F5C8810CB1E637401B53FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Ivan\Projects\vmpsoft\vmprotect\examples\licensing\Net\obj\Debug\TestApp.pdb
mscoree
_CorExeMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VMProtect/Licensing/Net/bin/TestApp.exe.vmp
- SHA256 bacd539a0d9120d270432ebc9617d8517a8289fbf392028e4d7388615e371827
- MD5 c205712b48b565bac062c0f4c1b41cde
- SHA1 fe697728c516aae25588ee12311e9dfbc39005fb
- SHA512 87d2a5ac739ea9a0e2e76d951e0dbe060d05dfe5ea17cea8549586f98256e3c109ef16eeedc7168aa1d6b9601db42e8a671100fa2e2632687ff45cbbd5ded2f9
- TLSH T173410A1568F42C362AAE22D53C4A8A5FEF54826A87187749307CB2433BBCD37464B855
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Net/bin/VMProtect.SDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b560d162c060b9ce441a8ab9a4ae9d4e0a8121145bf443789c2d978e5f645f75
- MD5 fb3f3c72e482cd1014dc0b6daf857421
- SHA1 1dc14bc418aa4985dc2cf1621d7cb7c6409da0c5
- SHA512 72f55b33826c75aca5dfb0b991722e83dd910cf36d6199159bcd5bcee078dfc407ee16f0855fd3274b6829a39b37ca722c45dcc28f3994b44543b602e5bf2d87
- SSDEEP 96:XbeBWY8lNW5lleAWbgjaJvbdI8cH4YJDcbNVOz8RpFxrPOPXCr3c7isLtKMHAUYu:ZY8zWUAOgjSjR+JdzwFxrhfMHDn
- TLSH T1A822A712B3E8A15AF5FB6731AD72113107B7BA594A76CE3F148D010F0B37A546BA0B63
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16174
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VMProtect/Licensing/VB6/Form1.frm
- SHA256 72f3f0834bdf15fa5e97dcc98ec01ae4faf841a5c964a187f4090b7e72bf14f7
- MD5 e3b94384f7b63da383df7cb62879155f
- SHA1 2b3f4bf73d16579704a704fb78a6f924db8c7640
- SHA512 4f4b3b2a53f43c9648454a36a33f70e4efd9248286be6c573e7b1ca6a7eac7dfa7e0b256bde7218578655f6b4d2bbf321848850501f262babac0ac0eb40a00d9
- SSDEEP 96:tL9PHf4gQH/DH/b/H/X6H/BH/6H/PH/kH/bYEQgENtUwngPb0IsV8KqoZQD1vGXh:h94gG/D/bP/XI/x/I/f/K/Z/itUwngPq
- TLSH T13EC1F086AA85A934CC7781189C1A14C9EC847A679A474C35B58DC5CD1FF3537B2BC3C1
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/VB6/TestApp.exe
- IMPHASH fd2e4b5aec9d700a0a84f5b1386417ac
- SHA256 8ddee2b12d40154c0c6fd7861f5c1ce17405d5d045a8ed9f8151d5621ea5be1d
- MD5 a4211d6b512848e881fd2643491a5865
- SHA1 fcbbdd16386ad581e87eb3f8c720fef99ad9639d
- SHA512 29c1e5f1708ee83af251d7e22b4ba74e96e5eba0f35039593712f41b311df2f58a216bb70c1b7260f5cd123a2f353b13221a375de687d4afa929008325a130a9
- SSDEEP 384:Ny0hUf1/rLlaHXgb22KMSI+31IRcd/vIp/vI1qLgMpIhCihBl63TBw2DJQ5Wud:NyU6pU3sn/QqLgDnhiBNJc
- TLSH T157E28312D88D5822F65285710A27ABAA4F073D316451DE4FBB89738C2D75F835BF834B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4756
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
msvbvm60
__vbaStrI2
_CIcos
_adj_fptan
__vbaStrI4
__vbaFreeVar
__vbaStrVarMove
__vbaLenBstr
__vbaFreeVarList
_adj_fdiv_m64
ord698
__vbaFreeObjList
_adj_fprem1
__vbaStrCat
__vbaSetSystemError
__vbaHresultCheckObj
_adj_fdiv_m32
__vbaVarForInit
ord595
__vbaObjSet
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
_CIsin
__vbaChkstk
EVENT_SINK_AddRef
__vbaGenerateBoundsError
DllFunctionCall
_adj_fpatan
EVENT_SINK_Release
_CIsqrt
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaExceptHandler
__vbaStrToUnicode
_adj_fprem
_adj_fdivr_m64
ord607
__vbaFPException
__vbaStrVarVal
__vbaVarCat
_CIlog
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaFreeStrList
_adj_fdivr_m32
_adj_fdiv_r
ord100
__vbaI4Var
__vbaStrToAnsi
__vbaVarDup
_CIatan
__vbaStrMove
_allmul
_CItan
__vbaVarForNext
_CIexp
__vbaFreeObj
__vbaFreeStr
Name
.text
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=14, version=7299,
count=2, id=9, version=8041,
count=1, id=13, version=8169,
VMProtect/Licensing/VB6/TestApp.exe.vmp
- SHA256 c97d7581ea84c053a60e1c7b09f652659f51617b0a58f78725a8ee5864f37644
- MD5 605d00311ba1bebd14d774cf2abb05ac
- SHA1 22144a7450a170adaa9b04835e25b12cc89b7b4a
- SHA512 9c052929839eefccef5cdbb446ecd42da84919c4d0a0f61d60abeda6e73edf8929e218cc427ea6dbb96f32c63522a9287c45d9f8bdceb0a8c2435b29d12c7c83
- TLSH T109411954B8F41C26276F11967D478DAFAA40836D862DB64C30BC63873BBCD370D8B448
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/VB6/TestApp.vbp
- SHA256 7c175262f356ed4ff74b802dac6a39c8d7b6a8513f28ff1add363cb75df8274f
- MD5 3accdff793806204ff920a8e864ea12b
- SHA1 bc01f168a5876cc56eabddbdc7f162583d43177f
- SHA512 b8d93cfe65cf3842c3c1242ed693ea03d0aeb0b4235f59b51793ec9afb637555b6427411f30f9d7bd4c839c31bc4ab078500b7602267d3d1154a717720830a5f
- TLSH T14D012D85B210207AE570303258F9BD523EC6BB7801C4026C82EC4CD08ECAC33B3623FA
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/VB6/TestApp.vbw
- SHA256 d696bd96ac86ddb3c7fc797cd6281e1372684e18a9c5efc632f480e961ff29ae
- MD5 fa8b8c8a0e9b5a0fd46efa4b69e381c6
- SHA1 630f94eb8e8007f3b2c9483c533df100f22ca60f
- SHA512 246307499a1373ea736f0472b5e4c00fdd5630073b50ee0620d2347e07617a7898140051d80301562b053bce093f2cbda523985396a898754535890efbb06c24
- TLSH T127B0129A024F14170B026B43414348058C84B05C002C44804B992093011164348C4282
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/VB6/VMProtectSDK.bas
- SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
- MD5 30d0ac58f09ba02d81dde6ea9067b582
- SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
- SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
- TLSH T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/VB6/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
- MD5 40a4a47c96945402c9a61a50a54aaca9
- SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
- SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
- SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
- TLSH T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect/Licensing/Xcode/AppDelegate.h
- SHA256 c3ded7a53d22e7f856ca953a2c6c4a6d20e92b0ca9818266e0eac6332fe90b28
- MD5 db05fe095b3cd92c813c1b446eca335b
- SHA1 79e356204363c409fe8b2fcbbb8c9cf0430b8e70
- SHA512 7769c22c8eec8f7f46e5eca277f49aff3d12c334fae358c03ab9a4f7cd3adbbe59f3168c212052e6fe258952490512957713331ce1db8d168bd4a41ea01c3bc0
- TLSH T104D05B8CFF49D43756D0014571212651F64A20042DE191CB37D55E53EC59077C69D776
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/AppDelegate.mm
- SHA256 276ac62ea36d5cc429c661dacf45ad7992338876884b1b0e05e6e98b3bf2ecab
- MD5 1be8bd9ff451f5a427eb128c96945422
- SHA1 66b9f4b936a62d06350e2f1bf6c357205ce5cfcf
- SHA512 24aeb0df3df0106238b1d091c8c8c172cc8fb3225cb6a6dee01310d79b518625fb38625504ef95c012a3c9a3f70be599a3e4fb3cda28c24eef882cdc69a4fc66
- TLSH T1D05154DF3422609EABE222D2927A549C2DF5B12057B390F5B8D60258305610DB2BC3EB
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app.vmp
- SHA256 74e8fba8ae5af3fdf0d362a004b0ef0a67244713c46418984fce974a840d2083
- MD5 7f0d84edd3328d30fc22f13dbaaff0a3
- SHA1 bf1879ff48f27f953f3b33bc798dd04f5489c7df
- SHA512 76bf5f495a6c42bf0ebff2421771e28a3eb8c49b7333e63136389f7c8ec6a5049acc82bd1e4d8aa90f3fa5c42673a944d809b1ebeefddfc6413e1588419c83b6
- TLSH T1CD41E81498F4182617FF10853D4ACA5FEF4482978329AB45307CA2833FBD836898B952
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Info.plist
- SHA256 de8ee1845f67374ca43aa5c4ec249c24697a78d1f9a84d5e2ffb29d9a0f2c7b7
- MD5 7811d5855a341ae7592a2c57a1fdcd2d
- SHA1 8b7ab963bee7e0004a272e302a15e10d1069a7ab
- SHA512 e27e969d865655e0e6c5379c42a08abc4a2cf38bdbed7e84661e2b230eb421ba1bbdf0a958931c0162abf8cc9be720abe0fbf0b68c25ea75bfa84d9f8935d82c
- TLSH T10E3148B5023036092D8112E692F3D16E119861CC5E7741FEFCCEA53F2A1EE27B271A57
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/VMProtect Licensing Test
- SHA256 de496be3920cc394099a2ec00a8aa195a1f016345cd0c48020fdaea2e2630a65
- MD5 e6ce50492c6c59c7087df14cd8ffeae4
- SHA1 6b85338bc2df31a08c01d961223fc0b175e5a0d3
- SHA512 a49e405b8c8bef85dfa4fb4693b68b13666c000d251cfd28c3ff19e13e8a780741c8168b6e9b1ca62f7a7a591d087855037775b741d91b8d6fb6cf3b56bfd1a8
- SSDEEP 768:iKBGMP6z8LPl/PRpWJ4WYlFxs9ugC5ljgZ+NGsIXIAIdIQCxr7pdOVWHSZr:itM6z0NRjWo2VC5ljgxSsr7p4VWSr
- TLSH T1BF532957FF20854BC98B4075C81E8B1CE139F768CF91B39B26A8DA884FB46535F0664B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/libVMProtectSDK.dylib
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/PkgInfo
- SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
- MD5 23b7d7d024abb0f558420e098800bf27
- SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
- SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
- MD5 SHA1 SHA512
VMProtect/Licensing/Xcode/VMProtect Licensing Test-Info.plist
- SHA256 536668bca1fb24cab8af74116ea753b041aacd1f61851da5ea853805f93d814d
- MD5 1182fba48ed55b87ad6a2210ecc449c7
- SHA1 7b36b6c82e31358e9e8dcad3199d3d507b9c0013
- SHA512 4996fe8569475ddf1d169795bd78af220a46f30c63b496f753e9e5406494c5bcbccbf426da54d289a1ae5cedcafafda2d8a05e846d938fbbc10dff3174bb36f4
- TLSH T1722126B1026175581E8213FB92F3C15A019862CC9E7701FAFCCEA63B200E9277370A56
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/VMProtect Licensing Test-Prefix.pch
- SHA256 3a48c1828d8385003447c835daf8fc0361692cf8eda1e2bf71a3e8d9c3cfc71f
- MD5 06819dddfacfaedabdb8c2e23e8c5173
- SHA1 e790354dc9d678409b02d91ad51e889bd9b04eb8
- SHA512 f5167c38f407539f67e801c28c904193d2d0f60b4d798589c8171ebb5b3ecc2aa290fa466b13c67d6cbad852f9b1a38cdaf53a71576863119ca7de29088c9ee8
- TLSH T162C0221CE40073A792C004809B0CDFE3730E62208BE3A62BD049D0202621D3C0052CF7
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.pbxproj
- SHA256 58817ac0792b3f5d4d26d4e96011314e044a346a9b6628b843bbfe8e52d56b66
- MD5 85d56c5bb24e3555d27e802246f201d9
- SHA1 86ca7b047b2383874d77bca68dc5ac46b9564abe
- SHA512 58fea88716d89eb273273f7278983ae40c9f6b0aa65687b9e68aa75d0b2b570f0170e9d86648a4c1500829a9744e2e9a14b6f6e6ce2e541672e97894d04a6000
- SSDEEP 192:wp3QqqpibxuNJklr6WsRPJRnqisLCw8ALCw2G606Hi3iF:cmbx0CwRCwv606j
- TLSH T14A62216B750C3227C2B41372F635CEA0F21DC23A59D864ECD4869C8525A885EC7FDEDA
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.xcworkspace/contents.xcworkspacedata
- SHA256 0a034b7b5a28b255efdb6688f11126c60536dd53336256c942cfa80a97a1124b
- MD5 b7a43fcb7e02669fa920eaa1f473509d
- SHA1 599d5b1238ac238e607ff1d925a8645c9038c014
- SHA512 fce72d971e38637e49f41b40a6050a31999d04f2b1a8838385a9c160fa92522ebe9ec5e890810bb7292d3b44ef279ac5913bd879aef1d807f812966a4e9ca4b5
- TLSH T1D3C012B951907A2719B18E514B16CC54F378614E20A44405759B8A932F2161CC3939D4
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/VMProtectLicense.ini
- SHA256 5ea757aa7e8df875c9dd7ebfdeff50b8086ad1d0f71c0e6f6aee48980d5f2bfa
- MD5 5f5200b0dd7009a0ef12ec5105e594dc
- SHA1 ee25ab7071919120740c7bae4d17db559304445c
- SHA512 50583dd18b0d3a4ddbfcbc6ed26cc968b0a455dbe44551fefe9a564210c06af37777a04db0b7065076f562f29877303e881f578a366eb4089b666864b2cd6bc8
- TLSH T1D5C02B40662020C4000231242E344C03B452C0354DC440F614845F8042F3C017BAC044
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/en.lproj/Credits.rtf
- SHA256 00be0708f1551e4184d1b6c7bb54a81dd4b3236bfe8d4ba13e49ac9221787ac4
- MD5 dc6c5c1a1cbee6b94374aa5287f7e79e
- SHA1 7fb83ff236d4480da52c36cd609e96ae03c98164
- SHA512 71ca4e5e18652b3f1b41899fdfd6a1740894aeda493ab0c3f05bc1a2f9bfdf884d071f6b6f156ad75bb703ceacc21d0b0ae88a93d32e08b2b1ebb185f7341127
- TLSH T174C04CADE44100904AC5A66EB9DA833E6AD0A6857687CD96155408507A4191B22D6C54
- MD5 SHA1 SHA512 TLSH
VMProtect/Licensing/Xcode/en.lproj/InfoPlist.strings
- SHA256 2a7f77dd390052d5407e2b494b173a9fc6b671ab757d25b79ed23352361dce5c
- MD5 3e5337e7aae41797043107c0a05980c7
- SHA1 c3b87f4a1d0b7a81c08b54aa19dfcd34db210ae2
- SHA512 23ca07123e45876869ea50dd5b22104d2934a6ad4dfeb3064c2e604536dd0df2c29076b70c1f475f015981654eb81d70c10a96cf678a4cc6913fd48eff8f20d5
- MD5 SHA1 SHA512
VMProtect/Licensing/Xcode/en.lproj/MainMenu.xib
- SHA256 20d53d1fd2101506e230c99e8f45719881690a154da817af6da1b73357245026
- MD5 7d858d777b2204b2ab0bb11f7cccbaa0
- SHA1 61a1cfb9b8350edaebca6297eb294234f5fd7e02
- SHA512 bed6c8f7436ea0e96b2fa0e8fa612643c9ef9582e3ff7f10c198d88dc79a69196fad3abceaf426bdbc9d0bdea22082e5b9a70509744bba22cba3cfd2fff4125a
- SSDEEP 384:i3qyt8EXSMFUVXLz21h2V0TSqwZ1PcAzk16ITNu+UJcDobguMpo0NSPaH86cT0NM:ifLM11LAywQXUZSz4psX
- TLSH T1CEF3390336CEB4990773145F8BB15E09705FCC7D82A86663B0F1D57BEE59EB1882226B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Xcode/libVMProtectSDK.dylib
- SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
- MD5 df2b9db64b5d9f268303a44f1b7526da
- SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
- SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
- SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
- TLSH T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect/Licensing/Xcode/main.m
- SHA256 1ed2881b24fce2892811bda260f5b4152fa2a723a83da149359270d61eb28263
- MD5 85a111c49304b0a60035426a215ee237
- SHA1 dbe6051ac6caa64a55e0a485ed5a2fa42d47d87f
- SHA512 67b9479faa39e11ac68791e1e6338c4f0da34f75cc1e77064cdd76164ea473f332a76bd3cdbaf722811c19e9e4b8e8c9a2f02e010a9e11b6f5fb2368e915804b
- TLSH T188D02B9510E558778BE2A267A8438F02F2117502E6BB78532585D0076DA2C9520A440B
- MD5 SHA1 SHA512 TLSH
VMProtect/Scripts/Delphi Resources/Project1.exe
- IMPHASH 1e7575186edecf060e4585f8bc74203f
- SHA256 a14c1e75ce36821ecd80e4525c888c9d58e80a23a8a5f6ebe9923f6a33d93e7d
- MD5 fcdd67939f856f8bcfc404bb5f706ec7
- SHA1 758d14e6d838e12d2c1e52f65594a91dbe744f4b
- SHA512 18be594c08513e005840d9af00174edb021fda635e5331528310f72fcfce20938edef99965ccf0039ec0283500239642bb6ff6809ef797c79f6c4c5ba1a6aff2
- SSDEEP 24576:FiRfWQHP2VPwHgzDe/EMdwBmSPk96vBL/5YSnrnS:AWHPISVZ9YSrnS
- TLSH T151156C13B392173FC136163AC96792A05C3B7A102E965856DFF4CD8C1FF92A12C3AA57
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
769096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey
user32
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetClassLongW
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
lstrcmpiA
LoadLibraryA
LocalFree
LocalAlloc
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
IsValidLocale
GetSystemDefaultUILanguage
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetUserDefaultUILanguage
GetLocaleInfoW
GetLastError
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TryEnterCriticalSection
SwitchToThread
SuspendThread
SizeofResource
SignalObjectAndWait
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
IsDebuggerPresent
MultiByteToWideChar
MulDiv
LockResource
LoadResource
LoadLibraryW
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfo
FreeResource
InterlockedExchangeAdd
InterlockedExchange
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FindResourceW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep
msimg32
AlphaBlend
gdi32
UnrealizeObject
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetAbortProc
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
Chord
BitBlt
Arc
AbortDoc
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
IsEqualGUID
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
vmprotectsdk32
VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin
Name
.text
Size
741KB
Virtual Size
741KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
20KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
1024B
Virtual Size
806B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
60B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect/Scripts/Delphi Resources/Project1.exe.vmp
- SHA256 52fc0fc9ca0e0656d4e42679ca3000a5355c93263feec7ed42728e4fbf3841b6
- MD5 ff49b44e7a2bb91461047c90a71ec505
- SHA1 f749fdfd1169cde78cd5404269f0f0e5f6b9da80
- SHA512 92415bf4671340f1fb5c218636051f5e7163fa8e710cd56d7eb4a038b0a0276a447819d444c52730ad2dddc6e22545126ce55c517d7fe4877355034f2b058ee1
- TLSH T1B5112118B599394046B210E478B5D984FE26C2C303780A41F0ED51275FB199DC9E7EB3
- MD5 SHA1 SHA512 TLSH
VMProtect/Scripts/Environment Variables/Project1.exe
- IMPHASH 8fbba78ee3fc992258b0d48632a5a024
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA
kernel32
MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc
vmprotectsdk32
VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin
Name
.text
Size
1024B
Virtual Size
714B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
502B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=1, productName=Unmarked objects,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=19, version=8078,
count=2, id=18, version=8444,
VMProtect/Scripts/Environment Variables/Project1.exe.vmp
- SHA256 4ccaf3279c3877e892d92e4bb445fc0aea379813c941a6b2d33a84272ce76eee
- MD5 ab4f04736edde15220a7068debe5771d
- SHA1 f89c7aa258820f2ddccacb5db73671d814b66bab
- SHA512 bc926d4d30d51d45411d7e93669cadbd10d0c5448362ea93e125fc2853124728bb8fb100e9f26c0efadf3d9123eb6cd288d7a8543db91852f622b1edceadf5e4
- TLSH T1C2014E0C56D4B90103FB50D43695D98EFEA183D3036A0A8172ECD79B0F7F5548AC7663
- MD5 SHA1 SHA512 TLSH
VMProtect/Scripts/External DLL/Project1.exe
- IMPHASH 8fbba78ee3fc992258b0d48632a5a024
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA
kernel32
MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc
vmprotectsdk32
VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin
Name
.text
Size
1024B
Virtual Size
714B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
502B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=1, productName=Unmarked objects,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=19, version=8078,
count=2, id=18, version=8444,
VMProtect/Scripts/External DLL/Project1.exe.vmp
- SHA256 a7d574bfbc558160aeaa163b0614e6ff4999a822ecb1a0aa640e8dafa6518686
- MD5 488094cdaf3c671a77e2516c8368db20
- SHA1 fe88d96cf6bbb0dd522cef1166215d1cc1f15a35
- SHA512 dc51aa6bdda1b327f2bbd69cd7f00cf91bf0b34afae88fa56284e6a647a3d95d3cda80abeca099065f454ad442364727dafeb8a062fa1826081ee58b28b990eb
- TLSH T15511BD08E1542D4806F361D03ED6B959ECB44183423B0642B5AD51970F364A5C7A76BB
- MD5 SHA1 SHA512 TLSH
VMProtect/Scripts/Random Section Names/Project1.exe
- IMPHASH 8fbba78ee3fc992258b0d48632a5a024
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA
kernel32
MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc
vmprotectsdk32
VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin
Name
.text
Size
1024B
Virtual Size
714B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
502B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=1, productName=Unmarked objects,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=19, version=8078,
count=2, id=18, version=8444,
VMProtect/Scripts/Random Section Names/Project1.exe.vmp
- SHA256 85aed524596107b858af4f62456198cbf8342a02ed472721f7f0f1566f04adf5
- MD5 d31e21a051463f08091283c4f974adb2
- SHA1 5e8f033ed0b178884dbc08fe8a375ab909f95e8f
- SHA512 bf3b45a115506509d0f2f5d952e5903bd39ad181dd100f9ec78e8d490fb5e1929bd01f950c1a9b9c65f366e43a72ded3ed0e2d67f9ef2fcb813815f54d0196bd
- TLSH T13611AF18B68165011AF350A021F68989FDB19293033E0A40B0DC625B9F36DAD5AE79FB
- MD5 SHA1 SHA512 TLSH
VMProtect/Scripts/Script Events/Project1.exe
- IMPHASH 8fbba78ee3fc992258b0d48632a5a024
- SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
- MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
- SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
- SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
- TLSH T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
user32
SetFocus
MessageBoxA
GetDlgItemTextA
GetDlgItem
EndDialog
DialogBoxIndirectParamA
kernel32
MultiByteToWideChar
GlobalFree
ExitProcess
GetModuleHandleA
GlobalAlloc
vmprotectsdk32
VMProtectDecryptStringA
VMProtectEnd
VMProtectBegin
Name
.text
Size
1024B
Virtual Size
714B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
502B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
132B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=4, id=1, productName=Unmarked objects,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=17, id=19, version=8078,
count=2, id=18, version=8444,
VMProtect/Scripts/Script Events/Project1.exe.vmp
- SHA256 c417b7afe50d6b6f10260fca070be34bf32003aef75b49e9aa3e480ab135b1d3
- MD5 42bee32b7a94c7b96259f778cc9c4230
- SHA1 a90ae01091f822ef7503894fed4d02446c096512
- SHA512 453b881ccb82cb0aa3dacf1db892a96aa1029288ef2ad39497db38763822858bc840996c72a3035b45f4379a84f4c3f9ee99e3012436941f5ead6e382792647d
- TLSH T1B8019C0CA15D6A4003F702956BA78D86ECF182D303760781B99C969B1F328948F936FB
- MD5 SHA1 SHA512 TLSH