VMProtect_Ultimate_v3.8.4_Build_1754.7z
- SHA256 4c860aaeed23be4aea90b2dbeba370a557b4d38097725449fe1f1cddb4b8b20b
Static task
static1
2 signatures
General
- Target VMProtect_Ultimate_v3.8.4_Build_1754.7z
- Size 48.5MB
- Sample261003-sdctpa116m
- SHA256 4c860aaeed23be4aea90b2dbeba370a557b4d38097725449fe1f1cddb4b8b20b
- MD5 d43402824039cd6044df1f52cb35964f
- SHA1 7acb38b8a8c608a53b23a6429489e87b7b491a78
- SHA512 e6113e957e9592e7ec41d0dfdb91a94bc51f50613e59da406ca0983d2bef7b686ef7a8d080f67a691fb170f94df20a7b826fbe341a51194dd7792b389c3f5468
- SSDEEP 786432:iJ58YcGoZF0yg38+WLiu/89AB52aJ/vfaoCxmG9SrgCeejczJlvh9Koqq7rbDWll:iYYc5Fcc8a525BsGEgMjo6oV77s1D
- TLSH T137B733E08BE8E028E7470C7E6860A7CC78599F3F9933052477D9CD6ADA82D550ED1EC6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 4 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect(1).exe unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect.exe unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect_Con(1).exe unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect_Con.exe - Unsigned PE 14 IoCs
Checks for missing Authenticode signature.
resource unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/GetFxVersion_.NET_4.x(1).exe unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/GetFxVersion_.NET_4.x.exe unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/Net/VMProtect.SDK(1).dll unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/Net/VMProtect.SDK.dll unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32(1).sys unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32.sys unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64(1).sys unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64.sys unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32(1).dll unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32.dll unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64(1).dll unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64.dll unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/unins000(1).exe unpack001/VMProtect_Ultimate_v3.8.4_Build_1754/unins000.exe
File Explorer
-
VMProtect_Ultimate_v3.8.4_Build_1754.7z.7z 48.5MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/GetFxVersion_.NET_4.x(1).exe.exe 24KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/GetFxVersion_.NET_4.x.exe.exe 24KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/_23(1).cfs97KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/_23.cfs97KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/deletable4B
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/deletable(1)4B
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/segments28B
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/segments(1)28B
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/_23(1).cfs148KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/_23.cfs148KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/deletable4B
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/deletable(1)4B
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/segments28B
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/segments(1)28B
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/en(1).qch1.5MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/en(1).qhc8KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/en.qch1.5MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/en.qhc8KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/ru(1).qch1.6MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/ru(1).qhc8KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/ru.qch1.6MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Help/ru.qhc8KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/ASM/VMProtectSDK(1).inc2KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/ASM/VMProtectSDK.inc2KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/C/VMProtectDDK(1).h3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/C/VMProtectDDK.h3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/C/VMProtectSDK(1).h3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/C/VMProtectSDK.h3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/Pascal/VMProtectSDK(1).pas9KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/Pascal/VMProtectSDK.pas9KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/VB6/VMProtectSDK(1).bas3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Include/VB6/VMProtectSDK.bas3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/de(1).lng20KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/de.lng20KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/en(1).lng9KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/en.lng9KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/fr(1).lng11KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/fr.lng11KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/ru(1).lng21KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/ru.lng21KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/zh(1).lng12KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/zh.lng12KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Linux/libVMProtectSDK32(1).so.elf 25KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Linux/libVMProtectSDK32.so.elf 25KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Linux/libVMProtectSDK64(1).so.elf 31KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Linux/libVMProtectSDK64.so.elf 31KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/OSX/libVMProtectSDK(1).dylib.dylib 49KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/OSX/libVMProtectSDK.dylib.dylib 49KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/BCC64ELF/VMProtectSDK64(1).lib2KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/BCC64ELF/VMProtectSDK64.lib2KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/MinGW/VMProtectSDK32(1).a18KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/MinGW/VMProtectSDK32.a18KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/MinGW/VMProtectSDK64(1).a18KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/MinGW/VMProtectSDK64.a18KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/Net/VMProtect.SDK(1).dll.dll 10KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/Net/VMProtect.SDK.dll.dll 10KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/OMF/VMProtectSDK32(1).lib3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/OMF/VMProtectSDK32.lib3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32(1).lib7KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32(1).sys.dll 3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32.lib7KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32.sys.dll 3KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64(1).lib7KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64(1).sys.dll 4KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64.lib7KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64.sys.dll 4KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32(1).dll.dll 98KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32(1).lib7KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32.dll.dll 98KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32.lib7KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64(1).dll.dll 116KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64(1).lib7KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64.dll.dll 116KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64.lib7KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect(1).exe.exe 29.9MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect.exe.exe 29.9MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect_Con(1).exe.exe 20.9MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect_Con.exe.exe 20.9MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/unins000(1).dat70KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/unins000(1).exe.exe 1.1MB
-
VMProtect_Ultimate_v3.8.4_Build_1754/unins000.dat70KB
-
VMProtect_Ultimate_v3.8.4_Build_1754/unins000.exe.exe 1.1MB
VMProtect_Ultimate_v3.8.4_Build_1754/GetFxVersion_.NET_4.x(1).exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0f482b57abc081aa9fdfb53562617a6b7a68a2d1d0c67fffd05b4f2abaab9b20
- MD5 c279d130e89e2b5cc9643c2134cc01bc
- SHA1 0d7e22f6d6e13a0c214291cd820e26bf85026543
- SHA512 2bbb740bbbaa3b289347683f0e01e4911248839ad6b3bdc7df8b4588f35c688caeea1a222fcb65d29a527ab644299fa42a6d64f331958c33a2e9f65eaaaff4bf
- SSDEEP 384:3819xkIe3XVWQmWn2fikZwtw84IePcxV:38QfEIeUxV
- TLSH T195B2B55437FD8B33EA758BF71D62528103B67522D491EB2E8DC9C4CA6562B040B82F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\testwork\GetFxVersion2\GetFxVersion2\obj\Debug\GetFxVersion2.pdb
mscoree
_CorExeMain
Name
.text
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VMProtect_Ultimate_v3.8.4_Build_1754/GetFxVersion_.NET_4.x.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 0f482b57abc081aa9fdfb53562617a6b7a68a2d1d0c67fffd05b4f2abaab9b20
- MD5 c279d130e89e2b5cc9643c2134cc01bc
- SHA1 0d7e22f6d6e13a0c214291cd820e26bf85026543
- SHA512 2bbb740bbbaa3b289347683f0e01e4911248839ad6b3bdc7df8b4588f35c688caeea1a222fcb65d29a527ab644299fa42a6d64f331958c33a2e9f65eaaaff4bf
- SSDEEP 384:3819xkIe3XVWQmWn2fikZwtw84IePcxV:38QfEIeUxV
- TLSH T195B2B55437FD8B33EA758BF71D62528103B67522D491EB2E8DC9C4CA6562B040B82F7B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
19022
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\testwork\GetFxVersion2\GetFxVersion2\obj\Debug\GetFxVersion2.pdb
mscoree
_CorExeMain
Name
.text
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/_23(1).cfs
- SHA256 6b04a9a3b58c6349e0871147fc9427577ed1d27243560ede7dc423aea893f342
- MD5 7ba7ff3536a2bc906de3016d8db76452
- SHA1 e8eb5c043f7a23302c4be2d72c2574543cd3865a
- SHA512 88ac10a5999fdaacab0c8c4fc1073b1e164539a05be30316d27ed0ced0971e6854063c29714c8dfed9f1f9da86ddb54322d506567acb54096214408c6e9dab1e
- SSDEEP 3072:7eQDdjUlAs6pjCJiaickfF0h79DzxUXKhp:9RUlHGjC00h79DzWXgp
- TLSH T1C4A34A43E0333493FE45017386679A0A37A1B3876E63B34A6BBD5368DB231C64FA2557
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/_23.cfs
- SHA256 6b04a9a3b58c6349e0871147fc9427577ed1d27243560ede7dc423aea893f342
- MD5 7ba7ff3536a2bc906de3016d8db76452
- SHA1 e8eb5c043f7a23302c4be2d72c2574543cd3865a
- SHA512 88ac10a5999fdaacab0c8c4fc1073b1e164539a05be30316d27ed0ced0971e6854063c29714c8dfed9f1f9da86ddb54322d506567acb54096214408c6e9dab1e
- SSDEEP 3072:7eQDdjUlAs6pjCJiaickfF0h79DzxUXKhp:9RUlHGjC00h79DzWXgp
- TLSH T1C4A34A43E0333493FE45017386679A0A37A1B3876E63B34A6BBD5368DB231C64FA2557
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/deletable
- SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
- MD5 f1d3ff8443297732862df21dc4e57262
- SHA1 9069ca78e7450a285173431b3e52c5c25299e473
- SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
- MD5 SHA1 SHA512
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/deletable(1)
- SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
- MD5 f1d3ff8443297732862df21dc4e57262
- SHA1 9069ca78e7450a285173431b3e52c5c25299e473
- SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
- MD5 SHA1 SHA512
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/segments
- SHA256 1384d654fc41f52d271b28a517644fb64f084ea2e0cad132bd0536cfc8a5e951
- MD5 f0ff4aa435141cdf84fb9427e7e8a7ba
- SHA1 967b548060c73ee4d24c8b021b1f16c3940465ee
- SHA512 259bb4c788b0e43cdcfddc9d02f6985d5af752d73d501bc5999ad77801cca597954faa879f3e16e7e2ed1ca65082497d3b395a4927ecd4d32c652b69731a225e
- MD5 SHA1 SHA512
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.en/segments(1)
- SHA256 1384d654fc41f52d271b28a517644fb64f084ea2e0cad132bd0536cfc8a5e951
- MD5 f0ff4aa435141cdf84fb9427e7e8a7ba
- SHA1 967b548060c73ee4d24c8b021b1f16c3940465ee
- SHA512 259bb4c788b0e43cdcfddc9d02f6985d5af752d73d501bc5999ad77801cca597954faa879f3e16e7e2ed1ca65082497d3b395a4927ecd4d32c652b69731a225e
- MD5 SHA1 SHA512
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/_23(1).cfs
- SHA256 f3c791e97e9306bc819d0b40b47fcd7810a8f3562b4b15366139abf11562d80f
- MD5 92a4b5067a547b95c500fce5728b3209
- SHA1 e2f05d3f41bb48e2f53525a6f6aece3c1c71fea9
- SHA512 2d47b0099fa05dc4357966c0db57c1ccb62921f1084c142718d9fda378423a7afc04bf222bee7df95a895370ff2c8fe15e622933ee6fec01f7fc0e7ddac9dffd
- SSDEEP 3072:MTgobzPRADxlOx1YWZhcbPwmmWQLBYahDYMcpIpJpmev4aQv2yqK:mnTnJhGQLduIseVc2m
- TLSH T171E31B32D12BB5CDEC0024A7C8252A053E9623BF7F976366167CFD78B6B35848D39246
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/_23.cfs
- SHA256 f3c791e97e9306bc819d0b40b47fcd7810a8f3562b4b15366139abf11562d80f
- MD5 92a4b5067a547b95c500fce5728b3209
- SHA1 e2f05d3f41bb48e2f53525a6f6aece3c1c71fea9
- SHA512 2d47b0099fa05dc4357966c0db57c1ccb62921f1084c142718d9fda378423a7afc04bf222bee7df95a895370ff2c8fe15e622933ee6fec01f7fc0e7ddac9dffd
- SSDEEP 3072:MTgobzPRADxlOx1YWZhcbPwmmWQLBYahDYMcpIpJpmev4aQv2yqK:mnTnJhGQLduIseVc2m
- TLSH T171E31B32D12BB5CDEC0024A7C8252A053E9623BF7F976366167CFD78B6B35848D39246
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/deletable
- SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
- MD5 f1d3ff8443297732862df21dc4e57262
- SHA1 9069ca78e7450a285173431b3e52c5c25299e473
- SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
- MD5 SHA1 SHA512
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/deletable(1)
- SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
- MD5 f1d3ff8443297732862df21dc4e57262
- SHA1 9069ca78e7450a285173431b3e52c5c25299e473
- SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
- MD5 SHA1 SHA512
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/segments
- SHA256 2b3c29488ba5d3668d8bc3578b69d99a86125d42ee9b3095e93750cef2ddb378
- MD5 e5d012672191cc44d4152bc1a2488dd3
- SHA1 693b1c74e460b78544bf7ac141813f1a73e9ab7d
- SHA512 331158dd67b3934ac437aca03e42dc79ed9d2bb67d3b2121a25abe38c2a9cdb67784c83ba4a885cdd9992cd18712ba04639375c05def347e6cc79ad06635e4ee
- MD5 SHA1 SHA512
VMProtect_Ultimate_v3.8.4_Build_1754/Help/.ru/segments(1)
- SHA256 2b3c29488ba5d3668d8bc3578b69d99a86125d42ee9b3095e93750cef2ddb378
- MD5 e5d012672191cc44d4152bc1a2488dd3
- SHA1 693b1c74e460b78544bf7ac141813f1a73e9ab7d
- SHA512 331158dd67b3934ac437aca03e42dc79ed9d2bb67d3b2121a25abe38c2a9cdb67784c83ba4a885cdd9992cd18712ba04639375c05def347e6cc79ad06635e4ee
- MD5 SHA1 SHA512
VMProtect_Ultimate_v3.8.4_Build_1754/Help/en(1).qch
- SHA256 0e4ca84295781aacc97e5842d13f4cd71150b3373feab486124c6d2e3bda00f6
- MD5 32bf7886e31b82df13b7f43cb09fc413
- SHA1 0637a4b4d01fb42fb0ebcffda8be6dbe87ac23d9
- SHA512 0a352c6732eb97d92cea123f7a539e6b43994625a1119666e8ec3d0c53e7ba2709a98659355c6e81578e32dd7705db6c0aa0cd3a5ffbe2c61b6ab645c41157f4
- SSDEEP 24576:mpbpXVUXODT0f6I87HCoot6wzmdqZ4RpFlHP9f7dhBt0zMklqIBHZN3elaWn0gjb:x+Mf8HIxmR15hBqzFHH30aWnLGH0B
- TLSH T194752342874BBE1BF78B4634B83A1611DD33363DD122D229711DCA996070BA611F9FAF
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/en(1).qhc
- SHA256 50edda5e45cbf3bb3af6497d2d0f3b7f4e3eda12efe2ac9868f02a21f5f9d38f
- MD5 453f1ba3abb0ed88fd9ea9cfc33d80cf
- SHA1 48c1adc2fcb5a01f6fb876e768e28b6e3a6b8f60
- SHA512 d3b4df1e0bbd4478639ad5c56778b30dc2f1c6b3143568eddc44e031ad676d9740b326be786c7ab4d78d1adafc83b4f4e2c88569d9f471e1e9582f10e11bed2e
- SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbgl284IqmmQxXHiedmXZVnyLXrmUNmXM:gHn3qUqeRF/u+dd62xIqmmQMeWGmUmM
- TLSH T1D0F1C0D647197432FED2C1BBF41212351D38228E0073C8F168AE62AB08535869A5BCFF
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/en.qch
- SHA256 0e4ca84295781aacc97e5842d13f4cd71150b3373feab486124c6d2e3bda00f6
- MD5 32bf7886e31b82df13b7f43cb09fc413
- SHA1 0637a4b4d01fb42fb0ebcffda8be6dbe87ac23d9
- SHA512 0a352c6732eb97d92cea123f7a539e6b43994625a1119666e8ec3d0c53e7ba2709a98659355c6e81578e32dd7705db6c0aa0cd3a5ffbe2c61b6ab645c41157f4
- SSDEEP 24576:mpbpXVUXODT0f6I87HCoot6wzmdqZ4RpFlHP9f7dhBt0zMklqIBHZN3elaWn0gjb:x+Mf8HIxmR15hBqzFHH30aWnLGH0B
- TLSH T194752342874BBE1BF78B4634B83A1611DD33363DD122D229711DCA996070BA611F9FAF
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/en.qhc
- SHA256 50edda5e45cbf3bb3af6497d2d0f3b7f4e3eda12efe2ac9868f02a21f5f9d38f
- MD5 453f1ba3abb0ed88fd9ea9cfc33d80cf
- SHA1 48c1adc2fcb5a01f6fb876e768e28b6e3a6b8f60
- SHA512 d3b4df1e0bbd4478639ad5c56778b30dc2f1c6b3143568eddc44e031ad676d9740b326be786c7ab4d78d1adafc83b4f4e2c88569d9f471e1e9582f10e11bed2e
- SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbgl284IqmmQxXHiedmXZVnyLXrmUNmXM:gHn3qUqeRF/u+dd62xIqmmQMeWGmUmM
- TLSH T1D0F1C0D647197432FED2C1BBF41212351D38228E0073C8F168AE62AB08535869A5BCFF
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/ru(1).qch
- SHA256 66c200ff8ab088884aeb5b12984b2fab68f89da9a335f2b3dda2a9dd3a85f8ee
- MD5 49cf58d95f8a1f267980c7bf903feb30
- SHA1 f68b1f01f0c78fb89f5ce6c4ac27d1a1fd1cf194
- SHA512 5658d46948829980ffd0997463de73aedc38b137a8343415a8266c69b6f313c8acca27f9eccda7c3f82890546d184281291c0a17556d21c057a5659cece4868f
- SSDEEP 24576:epQp/VZ2lISDQeohDV/goxG4HjsELPeaUhQqIFabsnFLHfOGbH8LgvzP+sahM4ls:J2mSMeohhHsp1IFaonjbcLAzP+ZOzt7
- TLSH T19A753300B30AF422F7CB1A3C51226B766EBDB53D5597E227325CC8ED60B4B06907C99B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/ru(1).qhc
- SHA256 a6dcd75f70f59ef64df34ca0ae56b748988e045beb209b6b73f6c9911184fdc2
- MD5 1e2632687f3185d19afc6e9d5a2beac1
- SHA1 d518286d2128196435d3e5801fb57a1f5ad48f8c
- SHA512 3388c06373cc5a841118fa9649ab2823518f2552c53fca30c29f02a40b184af55c8d8a13ad285b9d08293486b62704b968d016864d82afcec1872cea8ca3ced4
- SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbn2l284IqmmQxXHiedmXZVmyLXrmUNmXM:gHn3qUqeRF/u+ddnQ2xIqmmQMeWBmUmM
- TLSH T1AAF1E2D647197532FED2C1BBF41212351D38228E0073C8F168AE63AB08535869A5BCFF
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/ru.qch
- SHA256 66c200ff8ab088884aeb5b12984b2fab68f89da9a335f2b3dda2a9dd3a85f8ee
- MD5 49cf58d95f8a1f267980c7bf903feb30
- SHA1 f68b1f01f0c78fb89f5ce6c4ac27d1a1fd1cf194
- SHA512 5658d46948829980ffd0997463de73aedc38b137a8343415a8266c69b6f313c8acca27f9eccda7c3f82890546d184281291c0a17556d21c057a5659cece4868f
- SSDEEP 24576:epQp/VZ2lISDQeohDV/goxG4HjsELPeaUhQqIFabsnFLHfOGbH8LgvzP+sahM4ls:J2mSMeohhHsp1IFaonjbcLAzP+ZOzt7
- TLSH T19A753300B30AF422F7CB1A3C51226B766EBDB53D5597E227325CC8ED60B4B06907C99B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Help/ru.qhc
- SHA256 a6dcd75f70f59ef64df34ca0ae56b748988e045beb209b6b73f6c9911184fdc2
- MD5 1e2632687f3185d19afc6e9d5a2beac1
- SHA1 d518286d2128196435d3e5801fb57a1f5ad48f8c
- SHA512 3388c06373cc5a841118fa9649ab2823518f2552c53fca30c29f02a40b184af55c8d8a13ad285b9d08293486b62704b968d016864d82afcec1872cea8ca3ced4
- SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbn2l284IqmmQxXHiedmXZVmyLXrmUNmXM:gHn3qUqeRF/u+ddnQ2xIqmmQMeWBmUmM
- TLSH T1AAF1E2D647197532FED2C1BBF41212351D38228E0073C8F168AE63AB08535869A5BCFF
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/ASM/VMProtectSDK(1).inc
- SHA256 9d41f7bf8f220e721e34f54665db9b63caca9ea00fc650f81492736a196f731e
- MD5 a8c48a4a96b59b8bb464223cc5a7c66f
- SHA1 19c91906b42228e7c03c872fc3e2ceca2ed73658
- SHA512 121b00dbc539a9597235e7b44eb7aeb773daaa06e19cf48a44aa0ff935dba2e5cd1de5ac7585696744a9ea06918e775f649fbed32c01fa862d4cb112fe08dffe
- TLSH T1B44112068509768FC0A345B6BAA5AC50BE9BF91113FCCA6B60E50803134752CE7BDF9B
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/ASM/VMProtectSDK.inc
- SHA256 9d41f7bf8f220e721e34f54665db9b63caca9ea00fc650f81492736a196f731e
- MD5 a8c48a4a96b59b8bb464223cc5a7c66f
- SHA1 19c91906b42228e7c03c872fc3e2ceca2ed73658
- SHA512 121b00dbc539a9597235e7b44eb7aeb773daaa06e19cf48a44aa0ff935dba2e5cd1de5ac7585696744a9ea06918e775f649fbed32c01fa862d4cb112fe08dffe
- TLSH T1B44112068509768FC0A345B6BAA5AC50BE9BF91113FCCA6B60E50803134752CE7BDF9B
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/C/VMProtectDDK(1).h
- SHA256 e98615fe5506da30061c63a3c6a3b1dfd23892f783d1aa6a9e4fe891a59f2283
- MD5 28f7681c7317ba191dcc8bf36a6f6455
- SHA1 917c2fadc5e6ce96d52d0a2ca20e5436ec83d90f
- SHA512 6fea13ca6a2c55817ca968cec02df016b9d66f99f1dea71734d9de02170aa1817e7ac69f631810d5af25eccab298e4df89f5a2e59ec9ffda16247615c08bd41f
- TLSH T15561BD410D01306ED192D7F56737DC6225ACF12335F6EDEB220A24151BC354DABAEAAF
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/C/VMProtectDDK.h
- SHA256 e98615fe5506da30061c63a3c6a3b1dfd23892f783d1aa6a9e4fe891a59f2283
- MD5 28f7681c7317ba191dcc8bf36a6f6455
- SHA1 917c2fadc5e6ce96d52d0a2ca20e5436ec83d90f
- SHA512 6fea13ca6a2c55817ca968cec02df016b9d66f99f1dea71734d9de02170aa1817e7ac69f631810d5af25eccab298e4df89f5a2e59ec9ffda16247615c08bd41f
- TLSH T15561BD410D01306ED192D7F56737DC6225ACF12335F6EDEB220A24151BC354DABAEAAF
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/C/VMProtectSDK(1).h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/C/VMProtectSDK.h
- SHA256 2300b7b4bb6bbf9cfa08013ec2d9b2fdceb3dfd2e603cd1e24a493de4d165b15
- MD5 e8c78f60aaad4671110eba8991fe94ef
- SHA1 dce765aa7929102ad95dfac47325c67bc668c409
- SHA512 0b4d8366a75222834d6bf0ef1f403a15a6092312005683676f77c57fed370f109516354969c458a5c6d5dd32c3d0ad7d46ea7c70650e5f0b1eb3903231eed4be
- TLSH T1C571AB010D0120AEE292D7A52B77DD52359CF12335F6E8EF220A64151AC354E6BEEA9F
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/Pascal/VMProtectSDK(1).pas
- SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
- MD5 97a96877fc2c184b0e73e85529b34822
- SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
- SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
- SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
- TLSH T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/Pascal/VMProtectSDK.pas
- SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
- MD5 97a96877fc2c184b0e73e85529b34822
- SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
- SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
- SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
- TLSH T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/VB6/VMProtectSDK(1).bas
- SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
- MD5 30d0ac58f09ba02d81dde6ea9067b582
- SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
- SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
- TLSH T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Include/VB6/VMProtectSDK.bas
- SHA256 d2c1334fd893071b3b7e42d0817cbd37310c831af2af12ee1f94e8f654eff403
- MD5 30d0ac58f09ba02d81dde6ea9067b582
- SHA1 b97c402bb5e423d7e2bdc438bcfc4024b1d6a7d4
- SHA512 b06e099b109506716ce8d9c25f58d3af2b870510c1f3bc33c5d5cb5a356c626285e2b4e6503cebb5b4dd0276007552416b412854b115c01d9c6e795482d48ce2
- TLSH T1EC814999E6147C7AC8A5A1E83027DCEBBCEC529535B9D393603062CF0FA28CC67D4167
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/de(1).lng
- SHA256 e4eac81c8577be522e64ecfbf2dc9b70ced6f8037c06b4435f9a47026faa7152
- MD5 1d948322f290dd731111409d19a796b1
- SHA1 e14560433299648b2509dcc63d19ea0415c9dbb6
- SHA512 e23074117bbe471e846d58a64fddca6a9419d262d0c8c93ef5544653e0ce5d44e9c9baabe4997472a0667007f28071463725ccdf67dddcb349ff2015286cab28
- SSDEEP 384:9F8JZj8mGQkdnIIPghdGFf6sQoUojzWtlM2GPzYYOxLZO0l/fNsYMFO8:+jlkJIIPg5oU1BZRl/uz
- TLSH T178922A191B05624B92D327B3B200CC67BBB5C27827B4105704DCE3A52BABD3DABAF5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/de.lng
- SHA256 e4eac81c8577be522e64ecfbf2dc9b70ced6f8037c06b4435f9a47026faa7152
- MD5 1d948322f290dd731111409d19a796b1
- SHA1 e14560433299648b2509dcc63d19ea0415c9dbb6
- SHA512 e23074117bbe471e846d58a64fddca6a9419d262d0c8c93ef5544653e0ce5d44e9c9baabe4997472a0667007f28071463725ccdf67dddcb349ff2015286cab28
- SSDEEP 384:9F8JZj8mGQkdnIIPghdGFf6sQoUojzWtlM2GPzYYOxLZO0l/fNsYMFO8:+jlkJIIPg5oU1BZRl/uz
- TLSH T178922A191B05624B92D327B3B200CC67BBB5C27827B4105704DCE3A52BABD3DABAF5C5
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/en(1).lng
- SHA256 a7b508ca5a0bd7b6c12a4d4388eccd5df51545d35a34308310852a3824978b33
- MD5 eac9823d9e581a769365ea210991430d
- SHA1 6f7220f3517c1b63c51a4dc022a41794dcf17455
- SHA512 c2f924829469c044058ddbea39023bff94c68f7e968a6655c33682bd8591ee9411ab007c59e6d64847ec2d624e796ff5c68b39c844fab3511429091271ea2531
- SSDEEP 192:rORjTHr17nwN71QIg2S0aDNVsJG1EDN6uXxjw2EkVH/bvohKVKeeDt7deAnaR7Lm:a/HW9JSxDnsJG2DMSxjw2E0KuAnaR72P
- TLSH T13B22C50E2704629715D301B7AB528CA3A7B5825C6674020718ACF7A827E7D3CEBBB6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/en.lng
- SHA256 a7b508ca5a0bd7b6c12a4d4388eccd5df51545d35a34308310852a3824978b33
- MD5 eac9823d9e581a769365ea210991430d
- SHA1 6f7220f3517c1b63c51a4dc022a41794dcf17455
- SHA512 c2f924829469c044058ddbea39023bff94c68f7e968a6655c33682bd8591ee9411ab007c59e6d64847ec2d624e796ff5c68b39c844fab3511429091271ea2531
- SSDEEP 192:rORjTHr17nwN71QIg2S0aDNVsJG1EDN6uXxjw2EkVH/bvohKVKeeDt7deAnaR7Lm:a/HW9JSxDnsJG2DMSxjw2E0KuAnaR72P
- TLSH T13B22C50E2704629715D301B7AB528CA3A7B5825C6674020718ACF7A827E7D3CEBBB6D5
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/fr(1).lng
- SHA256 80282190c4103e8ed4d336ef95f9e1ff372c2a13d6d98f5e4c792058d17a6f31
- MD5 50fe54fb47dd57a6d9c994a7641a7dc8
- SHA1 a9da63767348f5cc1d8c58a84d5d3f3c1e5f6359
- SHA512 2c76294d5a5a3700390f7f9cbb7a906bad88cf7d8e8a5f99f008ff7454e6becafac863c3dc9a9b65b6a070c0c9bea0b35d02090c4257f76935a2d8b2cae3bc9c
- SSDEEP 192:aj2o6S4kp87L1NG3Ck2dH0zZ10NZapGYx1MvvWmPyY9NtPAhcy+LVS9n2rfgiXl6:IT3b2R0zUTY1MGmPyYK+h4nIoiV80S5
- TLSH T14D32C60EBA84614763D312F7B552D427A638C2547A19F2064CC8A7E863EFD3CD38F999
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/fr.lng
- SHA256 80282190c4103e8ed4d336ef95f9e1ff372c2a13d6d98f5e4c792058d17a6f31
- MD5 50fe54fb47dd57a6d9c994a7641a7dc8
- SHA1 a9da63767348f5cc1d8c58a84d5d3f3c1e5f6359
- SHA512 2c76294d5a5a3700390f7f9cbb7a906bad88cf7d8e8a5f99f008ff7454e6becafac863c3dc9a9b65b6a070c0c9bea0b35d02090c4257f76935a2d8b2cae3bc9c
- SSDEEP 192:aj2o6S4kp87L1NG3Ck2dH0zZ10NZapGYx1MvvWmPyY9NtPAhcy+LVS9n2rfgiXl6:IT3b2R0zUTY1MGmPyYK+h4nIoiV80S5
- TLSH T14D32C60EBA84614763D312F7B552D427A638C2547A19F2064CC8A7E863EFD3CD38F999
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/ru(1).lng
- SHA256 23b3ae6213c625db518c8415a094c07e5e3cb35086de3ed2ed3f7ec3e6d40e74
- MD5 19b8cc697735f8db69f24f86392621cb
- SHA1 b7df8ca99b05fb0a26b1ea21ee46c02f8c7a7a11
- SHA512 4f75f2f7dbdafe44e1f2f4b89127ecb2c586c1c3247558d6ca67de7a95d45064c1631b7be71d95f8f0d375a2f38f8f6ede6b7eb92477f803020e233a0e1e068f
- SSDEEP 384:Xr2m3ZlvfSVu7Ebi0FxF71Ki4aRU/EPve4AN8V3rsl92OQqa4a:Xr2a7SxFRRng92OQp
- TLSH T158A2F34FFAFC5114B5B6DA40AF3189D206EAB7102B19C0DD86CF2C5A1478AB477227E7
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/ru.lng
- SHA256 23b3ae6213c625db518c8415a094c07e5e3cb35086de3ed2ed3f7ec3e6d40e74
- MD5 19b8cc697735f8db69f24f86392621cb
- SHA1 b7df8ca99b05fb0a26b1ea21ee46c02f8c7a7a11
- SHA512 4f75f2f7dbdafe44e1f2f4b89127ecb2c586c1c3247558d6ca67de7a95d45064c1631b7be71d95f8f0d375a2f38f8f6ede6b7eb92477f803020e233a0e1e068f
- SSDEEP 384:Xr2m3ZlvfSVu7Ebi0FxF71Ki4aRU/EPve4AN8V3rsl92OQqa4a:Xr2a7SxFRRng92OQp
- TLSH T158A2F34FFAFC5114B5B6DA40AF3189D206EAB7102B19C0DD86CF2C5A1478AB477227E7
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/zh(1).lng
- SHA256 4aba9043b368374dbf35f32f87638823dbc00689fbd8813dd1fe182b0d8225f5
- MD5 c8e2c261387c9c6413f264dcb0d8dc4d
- SHA1 59ceec5963ebcc4383785c6d28b7d7057f144543
- SHA512 41cf283f9ba33a6623047f4bcaceb09cdc88b61ac111d401667c70bd98762d188ef9a51ea5c18f034ec5e159f731f375a4b95849f0c9e2c9e8e5bde78d4cefab
- SSDEEP 384:ENm0bnMYS5oftk8ns3CMUyREJURa2RBaOzI/9XPZO:ENmUECn8CMsiRdzI/9XPk
- TLSH T1F442630127FE6019F6F79F98EAB894564BBBBC261E1DC12D95C4404E18B1E808A777F3
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Langs/zh.lng
- SHA256 4aba9043b368374dbf35f32f87638823dbc00689fbd8813dd1fe182b0d8225f5
- MD5 c8e2c261387c9c6413f264dcb0d8dc4d
- SHA1 59ceec5963ebcc4383785c6d28b7d7057f144543
- SHA512 41cf283f9ba33a6623047f4bcaceb09cdc88b61ac111d401667c70bd98762d188ef9a51ea5c18f034ec5e159f731f375a4b95849f0c9e2c9e8e5bde78d4cefab
- SSDEEP 384:ENm0bnMYS5oftk8ns3CMUyREJURa2RBaOzI/9XPZO:ENmUECn8CMsiRdzI/9XPk
- TLSH T1F442630127FE6019F6F79F98EAB894564BBBBC261E1DC12D95C4404E18B1E808A777F3
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Linux/libVMProtectSDK32(1).so
- SHA256 e864f78e7780570c425cf1bcf7e8e5360ff7fe034875a2c93bce85187a56e324
- MD5 0192773c6965cb0b61ac968f38c5361c
- SHA1 201020d5086d147aaa896cc774130f689a00a541
- SHA512 62dbbb798659469cbcfe444b5abe964fb8b5de1809c88f7d0d2a096c7a65ecc80de5ad96f4856071fd1504b33a9b5be1e6b0be2d775844b3582a3acd5ce52a98
- SSDEEP 384:Sc6LggOxAHXUtyQv5YLNf37oBz3r37FDSuyU12ZNU/LglzWYO9F6xuVlXOgMr/7k:Sc6LfOx/N5YyyU6UFQx2IgMr/7EhZXx
- TLSH T14FC22A46FF81AD7BC5CB82B4619B4F587735C0214A61CF13B21842685E933CEADA3B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Linux/libVMProtectSDK32.so
- SHA256 e864f78e7780570c425cf1bcf7e8e5360ff7fe034875a2c93bce85187a56e324
- MD5 0192773c6965cb0b61ac968f38c5361c
- SHA1 201020d5086d147aaa896cc774130f689a00a541
- SHA512 62dbbb798659469cbcfe444b5abe964fb8b5de1809c88f7d0d2a096c7a65ecc80de5ad96f4856071fd1504b33a9b5be1e6b0be2d775844b3582a3acd5ce52a98
- SSDEEP 384:Sc6LggOxAHXUtyQv5YLNf37oBz3r37FDSuyU12ZNU/LglzWYO9F6xuVlXOgMr/7k:Sc6LfOx/N5YyyU6UFQx2IgMr/7EhZXx
- TLSH T14FC22A46FF81AD7BC5CB82B4619B4F587735C0214A61CF13B21842685E933CEADA3B4B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Linux/libVMProtectSDK64(1).so
- SHA256 28d72c59cefe78018e4be492d1f75a024f19c754671ce2e024e7c64caa53a565
- MD5 aff60628c99a1ed7ce30acdaf0ad9f98
- SHA1 39d03c53d55d7ccf297dc1b39bd896e3a7487011
- SHA512 e6e2fd4eb7c79e46b78242299f002103e170b19948aaec3215e543cd78cda395a711f3eac7df4911663b4d3d6e99ecea0f11bf36d0581dfbdc636368d4486953
- SSDEEP 768:q6he00JUA6NaqXPk8/6LOM+Bqqqqqcwc5h8D+HvKN:Y0tX/6LOMS8ci
- TLSH T157E2174BAF81ED7FC5DA833061974B692770E0128761C35B910447A52E93BCCED6B3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Linux/libVMProtectSDK64.so
- SHA256 28d72c59cefe78018e4be492d1f75a024f19c754671ce2e024e7c64caa53a565
- MD5 aff60628c99a1ed7ce30acdaf0ad9f98
- SHA1 39d03c53d55d7ccf297dc1b39bd896e3a7487011
- SHA512 e6e2fd4eb7c79e46b78242299f002103e170b19948aaec3215e543cd78cda395a711f3eac7df4911663b4d3d6e99ecea0f11bf36d0581dfbdc636368d4486953
- SSDEEP 768:q6he00JUA6NaqXPk8/6LOM+Bqqqqqcwc5h8D+HvKN:Y0tX/6LOMS8ci
- TLSH T157E2174BAF81ED7FC5DA833061974B692770E0128761C35B910447A52E93BCCED6B3AB
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/OSX/libVMProtectSDK(1).dylib
- SHA256 27e726386a83680917d72557adc5b271fd3446103826c3b290e85daee9f70777
- MD5 723829621c51d2d409fa6335aeaff372
- SHA1 a858b8cbe31a49d482792f081075817eade0f0b1
- SHA512 9314615d3d3e3bc63c6a84cc5a62720e872f01ff4fcd481108f8e118a20b52841747207952a5a54774e944dd307ca495580048e7911e1466739874b466a0e2da
- SSDEEP 768:JYsIlAGwZIWl19U1I+8Qi0RWOdQL8r+3INQvVldkFYuMAykBGSZtQ1:+sEw30+Wo
- TLSH T14933D813EB04A936CA4D50B4869FCF3EA074F12464F7D767B751E2282FA53983E5290B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/OSX/libVMProtectSDK.dylib
- SHA256 27e726386a83680917d72557adc5b271fd3446103826c3b290e85daee9f70777
- MD5 723829621c51d2d409fa6335aeaff372
- SHA1 a858b8cbe31a49d482792f081075817eade0f0b1
- SHA512 9314615d3d3e3bc63c6a84cc5a62720e872f01ff4fcd481108f8e118a20b52841747207952a5a54774e944dd307ca495580048e7911e1466739874b466a0e2da
- SSDEEP 768:JYsIlAGwZIWl19U1I+8Qi0RWOdQL8r+3INQvVldkFYuMAykBGSZtQ1:+sEw30+Wo
- TLSH T14933D813EB04A936CA4D50B4869FCF3EA074F12464F7D767B751E2282FA53983E5290B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/BCC64ELF/VMProtectSDK64(1).lib
- SHA256 c83a990b62940aa1fcf5c46d0e0e0650f67701599d6b8275cf54caf4147b69a7
- MD5 153360be133138b85c08da1456d18410
- SHA1 4b66fa428f750bf779305099b0e4a03c6c21d248
- SHA512 b07ff6c72d48f525b5ed0b7081899dd2dac0ef459d4cb1385a9e56fb4ec1f274e239c3544db947a6b390b74ea5647166d487d26fd66925a2666bf4c80ea92bb1
- TLSH T1D351011C8981392FC4F690F93722DDB0B275804681F2C753710D63A08B633CF6B9668B
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/BCC64ELF/VMProtectSDK64.lib
- SHA256 c83a990b62940aa1fcf5c46d0e0e0650f67701599d6b8275cf54caf4147b69a7
- MD5 153360be133138b85c08da1456d18410
- SHA1 4b66fa428f750bf779305099b0e4a03c6c21d248
- SHA512 b07ff6c72d48f525b5ed0b7081899dd2dac0ef459d4cb1385a9e56fb4ec1f274e239c3544db947a6b390b74ea5647166d487d26fd66925a2666bf4c80ea92bb1
- TLSH T1D351011C8981392FC4F690F93722DDB0B275804681F2C753710D63A08B633CF6B9668B
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/MinGW/VMProtectSDK32(1).a
- SHA256 e9ec7953b54c24c2cdfe2f4bd0a2feb288445ecc9d577c2e0edc4bb1f8d380c6
- MD5 c7781c19c852dcea536fe5d79350c4db
- SHA1 981e0a3b1ac1ef000fd0fb8b75b4d97eab9620e5
- SHA512 3d04ae98166bd365c3dd388e1a0555c18c78b7a652a1469a702d260146168f6f587ccaa6a0f4c1ea037b4921876a53c204a9343d837156ab2cf0c29b943d9600
- SSDEEP 192:eT1+6gR0oGZxWk7ZwCa1JCaICZ3CEACj2CWLCVHMCg7NCP6CS7CxtCH8cC4kCF3v:YoR0OKITY3
- TLSH T16992D3B2B2936DCBE6B541BD9587DF62273CF0E14AA6C763322C64600BE1D497EC6107
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/MinGW/VMProtectSDK32.a
- SHA256 e9ec7953b54c24c2cdfe2f4bd0a2feb288445ecc9d577c2e0edc4bb1f8d380c6
- MD5 c7781c19c852dcea536fe5d79350c4db
- SHA1 981e0a3b1ac1ef000fd0fb8b75b4d97eab9620e5
- SHA512 3d04ae98166bd365c3dd388e1a0555c18c78b7a652a1469a702d260146168f6f587ccaa6a0f4c1ea037b4921876a53c204a9343d837156ab2cf0c29b943d9600
- SSDEEP 192:eT1+6gR0oGZxWk7ZwCa1JCaICZ3CEACj2CWLCVHMCg7NCP6CS7CxtCH8cC4kCF3v:YoR0OKITY3
- TLSH T16992D3B2B2936DCBE6B541BD9587DF62273CF0E14AA6C763322C64600BE1D497EC6107
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/MinGW/VMProtectSDK64(1).a
- SHA256 efdabacc562bf95052bc3b417c5373bd1a7efc8683964c2d1f8bae37d3f32ef2
- MD5 ba4528b9cd2d1e85025e10e057491b6d
- SHA1 6e88bc21f7a64290b07d1ce4984636e3cfbd6d09
- SHA512 224d31c39785f187879cc66ccfde3c8fb70d815caa4046ed259ca588e4490cf6fbd3c395ba908aaa31c86d760d79c037109b17f7ac245bb552397eca7c536c5d
- SSDEEP 192:ew4MWCAmDxZ2B6VqVKWzXYInZ6aDrP3MIdIVd+so1x3C231nk7DKyIPBR6AcvmK:n4bRQ
- TLSH T18B82E0B2B2A25D8BE6B541BD9697EE62273CF0D14A76CB13322C69200FD1D457EC610B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/MinGW/VMProtectSDK64.a
- SHA256 efdabacc562bf95052bc3b417c5373bd1a7efc8683964c2d1f8bae37d3f32ef2
- MD5 ba4528b9cd2d1e85025e10e057491b6d
- SHA1 6e88bc21f7a64290b07d1ce4984636e3cfbd6d09
- SHA512 224d31c39785f187879cc66ccfde3c8fb70d815caa4046ed259ca588e4490cf6fbd3c395ba908aaa31c86d760d79c037109b17f7ac245bb552397eca7c536c5d
- SSDEEP 192:ew4MWCAmDxZ2B6VqVKWzXYInZ6aDrP3MIdIVd+so1x3C231nk7DKyIPBR6AcvmK:n4bRQ
- TLSH T18B82E0B2B2A25D8BE6B541BD9697EE62273CF0D14A76CB13322C69200FD1D457EC610B
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/Net/VMProtect.SDK(1).dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8ff4bb2b247b67d707c77d32f4541c4de99ac8213aebc411fd36ab0dbd201da
- MD5 6e177b6a7e784ada4226d1bb5bea56d2
- SHA1 dbede14faecd8ccd413f5c583d0c80f99b0b39fd
- SHA512 9d8781da98c0e1c01701f7ac5e0701af72a99a10d64d560272987b72ae5fb5da1fa29be24d6a5d17222510eb1420d9dcb37211e28c0e3b6d908c0dc31b759a09
- SSDEEP 96:4jKLWlYY8hV5ln3KXkhk6EIIIII/Kg5y0bNVOz7RpSxr9+PXCr3c77dOHKMHm3je:jY8TTvOIIIII/J0z/SxrU3MHAjA
- TLSH T1C822A712B3E85216E4FBA736A97252240B73B9594973CF3F244C010F1B376446AB1BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/Net/VMProtect.SDK.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 b8ff4bb2b247b67d707c77d32f4541c4de99ac8213aebc411fd36ab0dbd201da
- MD5 6e177b6a7e784ada4226d1bb5bea56d2
- SHA1 dbede14faecd8ccd413f5c583d0c80f99b0b39fd
- SHA512 9d8781da98c0e1c01701f7ac5e0701af72a99a10d64d560272987b72ae5fb5da1fa29be24d6a5d17222510eb1420d9dcb37211e28c0e3b6d908c0dc31b759a09
- SSDEEP 96:4jKLWlYY8hV5ln3KXkhk6EIIIII/Kg5y0bNVOz7RpSxr9+PXCr3c77dOHKMHm3je:jY8TTvOIIIII/J0z/SxrU3MHAjA
- TLSH T1C822A712B3E85216E4FBA736A97252240B73B9594973CF3F244C010F1B376446AB1BF2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
16574
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb
mscoree
_CorDllMain
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/OMF/VMProtectSDK32(1).lib
- SHA256 06497f7b7d9670bdc832506b00707eae521f310eaaa5998ec6f6f4bdfadc1e87
- MD5 0e1a96050ea2afc299dc4d05a327b044
- SHA1 0627d91000c0e06c4a8d8c80d257ffc709ceb688
- SHA512 309518a1a6d23843f675d0e2173f0f85f5adc3049eed9b91b8cbe64796d8ab166ca0f9dc82c43c85102cdfa2b8e54978a459fe097486f2ead6557e00288e3f46
- TLSH T1BA71373A19513A6FC4E390FA2A56CD9AFAB471D51AF1C573A7A111BF0F2E08C372504B
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/OMF/VMProtectSDK32.lib
- SHA256 06497f7b7d9670bdc832506b00707eae521f310eaaa5998ec6f6f4bdfadc1e87
- MD5 0e1a96050ea2afc299dc4d05a327b044
- SHA1 0627d91000c0e06c4a8d8c80d257ffc709ceb688
- SHA512 309518a1a6d23843f675d0e2173f0f85f5adc3049eed9b91b8cbe64796d8ab166ca0f9dc82c43c85102cdfa2b8e54978a459fe097486f2ead6557e00288e3f46
- TLSH T1BA71373A19513A6FC4E390FA2A56CD9AFAB471D51AF1C573A7A111BF0F2E08C372504B
- MD5 SHA1 SHA512 TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32(1).lib
- SHA256 7850eacfcecbac9b0f9b9335060f53c5b17a8d817222a0b3065c83a22d1c831d
- MD5 6fa3f4bbd0297dafca362dfda740d277
- SHA1 2f03a54649a68661114469ec35e80a7dc68a1b86
- SHA512 9c5ea26eb61c9d5578815c1d30a59ee9dc2da5bcce5e203833b943a82ac8531476938d33d3c173ff88a82bdf788b1bc48b7746c6b2097c0f8278b1e77b248c0d
- SSDEEP 96:Rkm/+uYlVlHKU3v/hkn3/KjyKLKZ6LXz7:6Vln/hKvO
- TLSH T116F18A3749127E1FCAFAC8FAE293DDEA352C348A01F6C127711D50D163A65ADB79A007
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32(1).sys
- SHA256 dac2a0eee4a75050894c88f0dc56cfe7c44c357e1d553bd95e3fa5588cdfddd6
- MD5 58944cd6fbde27325c26ca3c0a1d8aaa
- SHA1 6fcafca140af5cd6bd0daa3cc26591d560f5ae3c
- SHA512 261ada1ccd77e9734c6f9a4bdbc1812fb75c4082e3572d941470c1ecb9cf3cba23a7eded241ede41614e55909a058dd9d0cdf79523a321b2900784c5306f2aeb
- TLSH T1FB7101469660BABFD4CA09F937E2EC223578801493F6C2D75711072667813DF3A39587
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
124B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1024B
Virtual Size
854B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32.lib
- SHA256 7850eacfcecbac9b0f9b9335060f53c5b17a8d817222a0b3065c83a22d1c831d
- MD5 6fa3f4bbd0297dafca362dfda740d277
- SHA1 2f03a54649a68661114469ec35e80a7dc68a1b86
- SHA512 9c5ea26eb61c9d5578815c1d30a59ee9dc2da5bcce5e203833b943a82ac8531476938d33d3c173ff88a82bdf788b1bc48b7746c6b2097c0f8278b1e77b248c0d
- SSDEEP 96:Rkm/+uYlVlHKU3v/hkn3/KjyKLKZ6LXz7:6Vln/hKvO
- TLSH T116F18A3749127E1FCAFAC8FAE293DDEA352C348A01F6C127711D50D163A65ADB79A007
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK32.sys
- SHA256 dac2a0eee4a75050894c88f0dc56cfe7c44c357e1d553bd95e3fa5588cdfddd6
- MD5 58944cd6fbde27325c26ca3c0a1d8aaa
- SHA1 6fcafca140af5cd6bd0daa3cc26591d560f5ae3c
- SHA512 261ada1ccd77e9734c6f9a4bdbc1812fb75c4082e3572d941470c1ecb9cf3cba23a7eded241ede41614e55909a058dd9d0cdf79523a321b2900784c5306f2aeb
- TLSH T1FB7101469660BABFD4CA09F937E2EC223578801493F6C2D75711072667813DF3A39587
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
4096
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
124B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1024B
Virtual Size
854B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64(1).lib
- SHA256 2f5c114bf3bd77c53d5d493d9fd6269c0bd19674321e680da973551389d5fd90
- MD5 5f0a3a4815c4db1eded132ecd4c5578f
- SHA1 2fd3a09349d0fd29bfc03474239ac16f3e1c2531
- SHA512 b347d982c987df2675bb129d18aeb8cd67002523e8065f87743b8d82fa18cac2dd2fa39ee0d6da87497704fbe3826021022ef8d85902f7ed89d59cda5dfd5742
- SSDEEP 48:WZj/k5RLRzRCRXB6cI15PXy/F/CRcRj15T1sRLRyIBr8nX4nKryAOjgK045PK7cx:WNkqBx1Cr7nKhKjK7uwIs8r
- TLSH T1C8E17B354491BD0FD9FA84F67B71ECE63A9C104612FAC95B340D069283A267FE3CA207
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64(1).sys
- SHA256 8c75dbbd30d07c70301ceaad7bb102f7009d712be045987c7791764d7c0cb2d4
- MD5 c39d859e6a41636c9ce2306371186e5e
- SHA1 7743e3f9b17a1b891d9cd02add5fcdac2db652de
- SHA512 82475e14dc4a48c56bdf595d72e0e77a0e62971bb6f331ddabb524037a8291976e28841588a76a95e5417b141406bca90f6773c35c16532aeb5fff5ac6dd5c2c
- TLSH T1B681FE42D58039AFE4D909F837E2EC6632B8101953F7C2D7A71117261B823DF3239547
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
512B
Virtual Size
115B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1024B
Virtual Size
854B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64.lib
- SHA256 2f5c114bf3bd77c53d5d493d9fd6269c0bd19674321e680da973551389d5fd90
- MD5 5f0a3a4815c4db1eded132ecd4c5578f
- SHA1 2fd3a09349d0fd29bfc03474239ac16f3e1c2531
- SHA512 b347d982c987df2675bb129d18aeb8cd67002523e8065f87743b8d82fa18cac2dd2fa39ee0d6da87497704fbe3826021022ef8d85902f7ed89d59cda5dfd5742
- SSDEEP 48:WZj/k5RLRzRCRXB6cI15PXy/F/CRcRj15T1sRLRyIBr8nX4nKryAOjgK045PK7cx:WNkqBx1Cr7nKhKjK7uwIs8r
- TLSH T1C8E17B354491BD0FD9FA84F67B71ECE63A9C104612FAC95B340D069283A267FE3CA207
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectDDK64.sys
- SHA256 8c75dbbd30d07c70301ceaad7bb102f7009d712be045987c7791764d7c0cb2d4
- MD5 c39d859e6a41636c9ce2306371186e5e
- SHA1 7743e3f9b17a1b891d9cd02add5fcdac2db652de
- SHA512 82475e14dc4a48c56bdf595d72e0e77a0e62971bb6f331ddabb524037a8291976e28841588a76a95e5417b141406bca90f6773c35c16532aeb5fff5ac6dd5c2c
- TLSH T1B681FE42D58039AFE4D909F837E2EC6632B8101953F7C2D7A71117261B823DF3239547
- MD5 SHA1 SHA512 TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
512B
Virtual Size
115B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1024B
Virtual Size
854B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32(1).dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 d53173dca9ff097049fa9b81acd177ffc9de0ff577a59efd320b630f678079a9
- MD5 fc93208a3967e452b22579c38c03d955
- SHA1 ca97393362b44c70fd8393864118c9e21a5271ad
- SHA512 eb071e65ec950123aa61f971350647240860114f9dec0de2aafab4ab0e9a9698d1beb0e01a79951fa8553c9f0119cda50f4feb82b09dccc984c9e03326cd3982
- SSDEEP 1536:KT33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwf0YXowGF:KhQC2mCYK3RhrZ9dPk2Q9yMJwf0YRG
- TLSH T1E9A36B10B4D1C432E0BE19380535D5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32(1).lib
- SHA256 ee09a629c0066ae175caf97ee92bfd7bcfa58e12b29b7aa62cc88fd3f097ef4f
- MD5 c6d008fb4719a0c36d18748c89b04f25
- SHA1 744cf2e5f49286c243071235c8c624eff2abf23e
- SHA512 6d3f0932415a2906b6917ddb84b388eec493ac542917f6e03ad176ec6793735bb291192e6f1b0cd0e037076f8cc6a4fcbd666c30d0c9530a25be029d2424f818
- SSDEEP 96:MCm/+uYlVlGKU3A/hknyxbKXKEDKCbZLfI:VVll/hHCK
- TLSH T163F1893B0A623E6FC8FAC0F9F296EDA5352C344605F5C167716E059313AE58E7B8A107
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32.dll
- IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
- SHA256 d53173dca9ff097049fa9b81acd177ffc9de0ff577a59efd320b630f678079a9
- MD5 fc93208a3967e452b22579c38c03d955
- SHA1 ca97393362b44c70fd8393864118c9e21a5271ad
- SHA512 eb071e65ec950123aa61f971350647240860114f9dec0de2aafab4ab0e9a9698d1beb0e01a79951fa8553c9f0119cda50f4feb82b09dccc984c9e03326cd3982
- SSDEEP 1536:KT33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwf0YXowGF:KhQC2mCYK3RhrZ9dPk2Q9yMJwf0YRG
- TLSH T1E9A36B10B4D1C432E0BE19380535D5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
8197
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
DecodePointer
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
64KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.gfids
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=241, version=40116,
count=124, id=243, version=40116,
count=25, id=242, version=40116,
count=17, id=259, version=24123,
count=21, id=261, version=24123,
count=16, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=89, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK32.lib
- SHA256 ee09a629c0066ae175caf97ee92bfd7bcfa58e12b29b7aa62cc88fd3f097ef4f
- MD5 c6d008fb4719a0c36d18748c89b04f25
- SHA1 744cf2e5f49286c243071235c8c624eff2abf23e
- SHA512 6d3f0932415a2906b6917ddb84b388eec493ac542917f6e03ad176ec6793735bb291192e6f1b0cd0e037076f8cc6a4fcbd666c30d0c9530a25be029d2424f818
- SSDEEP 96:MCm/+uYlVlGKU3A/hknyxbKXKEDKCbZLfI:VVll/hHCK
- TLSH T163F1893B0A623E6FC8FAC0F9F296EDA5352C344605F5C167716E059313AE58E7B8A107
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64(1).dll
- IMPHASH 1851ff453adce0cef5274e320d5bed3c
- SHA256 af82c309ace1ce81c23aa190c65f4eaa4e2e668e227175e66b0637b56f546796
- MD5 724d8234d574846b6ee2262a2977650d
- SHA1 b3fb659ddb3306e23342a0232b9b85e924ae36d5
- SHA512 3ea5ed4fb38986098d19221e5dbf4f48a0ccf5c912235bfdc160bb949721c298e904bbaa1070beb67cb9cfdabb0163a7a51e593f37e2bc03c69b7200c3967e83
- SSDEEP 3072:xmcqYHq7Aiytzg2ScpvgJcG5sqYX6UmHRlBS:80Hq7AiyegZgJZSX+xH
- TLSH T1F6C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
8864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64(1).lib
- SHA256 5f7fea4dedcb9c0fb061ba7e7e27f53e3a0fe9e3a304be3d21514f751b14a791
- MD5 e5645a6b0f63284b3a945e57ebafac62
- SHA1 47da2a60cc73ac2b3686d54969216a6496eff149
- SHA512 ef0bc289b0c0197786c27eef92bbbc4f67c284200dbb2bcb531df6e4edc99b34ab313439180e98b3d06d3f39ae777cc4aedab52c67b426ef72e600f4547fc886
- SSDEEP 48:oZ5/k5RLRzRCRXB6cI15RXy/F/CRcRj15T1tRLRyIBrHX43KXyAOvMKKo5vKqsRb:ojkqBb1xrI3K5KZKquiccst
- TLSH T137E19A3D4AA03DAFD8EAC0F97BB1ECE63E5C108202F9C457758D1641436635FA78A207
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64.dll
- IMPHASH 1851ff453adce0cef5274e320d5bed3c
- SHA256 af82c309ace1ce81c23aa190c65f4eaa4e2e668e227175e66b0637b56f546796
- MD5 724d8234d574846b6ee2262a2977650d
- SHA1 b3fb659ddb3306e23342a0232b9b85e924ae36d5
- SHA512 3ea5ed4fb38986098d19221e5dbf4f48a0ccf5c912235bfdc160bb949721c298e904bbaa1070beb67cb9cfdabb0163a7a51e593f37e2bc03c69b7200c3967e83
- SSDEEP 3072:xmcqYHq7Aiytzg2ScpvgJcG5sqYX6UmHRlBS:80Hq7AiyegZgJZSX+xH
- TLSH T1F6C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
8864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
IsDebuggerPresent
GetLocalTime
GetTickCount
GetModuleFileNameW
GetPrivateProfileStringW
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
HeapFree
HeapAlloc
GetStringTypeW
GetACP
GetStdHandle
GetFileType
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
HeapSize
HeapReAlloc
GetConsoleMode
FlushFileBuffers
WriteFile
GetConsoleCP
SetFilePointerEx
CloseHandle
WriteConsoleW
CreateFileW
RaiseException
VMProtectActivateLicense
VMProtectBegin
VMProtectBeginMutation
VMProtectBeginUltra
VMProtectBeginUltraLockByKey
VMProtectBeginVirtualization
VMProtectBeginVirtualizationLockByKey
VMProtectDeactivateLicense
VMProtectDecryptStringA
VMProtectDecryptStringW
VMProtectEnd
VMProtectFreeString
VMProtectGetCurrentHWID
VMProtectGetOfflineActivationString
VMProtectGetOfflineDeactivationString
VMProtectGetSerialNumberData
VMProtectGetSerialNumberState
VMProtectIsDebuggerPresent
VMProtectIsProtected
VMProtectIsValidImageCRC
VMProtectIsVirtualMachinePresent
VMProtectSetSerialNumber
Name
.text
Size
67KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
148B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=241, version=40116,
count=124, id=243, version=40116,
count=14, id=242, version=40116,
count=7, id=259, version=24123,
count=20, id=261, version=24123,
count=17, id=260, version=24123,
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=90, id=1, productName=Unmarked objects,
count=2, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
VMProtect_Ultimate_v3.8.4_Build_1754/Lib/Windows/VMProtectSDK64.lib
- SHA256 5f7fea4dedcb9c0fb061ba7e7e27f53e3a0fe9e3a304be3d21514f751b14a791
- MD5 e5645a6b0f63284b3a945e57ebafac62
- SHA1 47da2a60cc73ac2b3686d54969216a6496eff149
- SHA512 ef0bc289b0c0197786c27eef92bbbc4f67c284200dbb2bcb531df6e4edc99b34ab313439180e98b3d06d3f39ae777cc4aedab52c67b426ef72e600f4547fc886
- SSDEEP 48:oZ5/k5RLRzRCRXB6cI15RXy/F/CRcRj15T1tRLRyIBrHX43KXyAOvMKKo5vKqsRb:ojkqBb1xrI3K5KZKquiccst
- TLSH T137E19A3D4AA03DAFD8EAC0F97BB1ECE63E5C108202F9C457758D1641436635FA78A207
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect(1).exe
- IMPHASH dd965029246aa7de15b1d7344b21536e
- SHA256 951f9bc353fb7e6b20d4ea6395ac000a22c264dda86ff09872225b8e062c5ac2
- MD5 f6c53db93a80726dc0fbafca10e17cb5
- SHA1 1545dc4f768271987a077b5c536ff8412b36b7db
- SHA512 cba62f8bcc66d62111e0100c499eb30c1b4947c8bfe7f94bde7c32658021646b8a06c54ed8ba031b1d019cc15295755e65c1896115913d5458ce1c94f04abb7c
- SSDEEP 786432:1uUPpO34HoQ/3KIjdXMeSNzfR1xHSvCcHwN/j:oUx6INMhFSbi
- TLSH T1446733DB0AB90B9EC046E9751947029F14C96E8A907BC4563FCB6C0BAE35D338DB5633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
97:34:3d:5b:66:1f:6d:8a:4e:10:3d:fe:df:0f:6f:d3:36:a0:2a:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Chains
Jul 22, 2023
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Serial Number
07:25:df:15:2a:5b:89:92:f3:68:49:ae
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 23, 2023 - Jun 17, 2026
Minor OS version
2
Major OS version
5
Entry point
66184093
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
winmm
PlaySoundW
imm32
ImmGetDefaultIMEWnd
opengl32
glBindTexture
ws2_32
gethostname
kernel32
SetEvent
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetCapture
gdi32
SetWorldTransform
advapi32
CopySid
shell32
CommandLineToArgvW
ole32
OleGetClipboard
oleaut32
GetErrorInfo
psapi
EnumProcessModules
Name
.text
Size
Virtual Size
18.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
15.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
13B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.qtmetad
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.egE
Size
Virtual Size
11.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.ov=
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.l33
Size
29.6MB
Virtual Size
29.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
339KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect.exe
- IMPHASH dd965029246aa7de15b1d7344b21536e
- SHA256 951f9bc353fb7e6b20d4ea6395ac000a22c264dda86ff09872225b8e062c5ac2
- MD5 f6c53db93a80726dc0fbafca10e17cb5
- SHA1 1545dc4f768271987a077b5c536ff8412b36b7db
- SHA512 cba62f8bcc66d62111e0100c499eb30c1b4947c8bfe7f94bde7c32658021646b8a06c54ed8ba031b1d019cc15295755e65c1896115913d5458ce1c94f04abb7c
- SSDEEP 786432:1uUPpO34HoQ/3KIjdXMeSNzfR1xHSvCcHwN/j:oUx6INMhFSbi
- TLSH T1446733DB0AB90B9EC046E9751947029F14C96E8A907BC4563FCB6C0BAE35D338DB5633
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
97:34:3d:5b:66:1f:6d:8a:4e:10:3d:fe:df:0f:6f:d3:36:a0:2a:4f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Chains
Jul 22, 2023
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Serial Number
07:25:df:15:2a:5b:89:92:f3:68:49:ae
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 23, 2023 - Jun 17, 2026
Minor OS version
2
Major OS version
5
Entry point
66184093
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
winmm
PlaySoundW
imm32
ImmGetDefaultIMEWnd
opengl32
glBindTexture
ws2_32
gethostname
kernel32
SetEvent
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
SetCapture
gdi32
SetWorldTransform
advapi32
CopySid
shell32
CommandLineToArgvW
ole32
OleGetClipboard
oleaut32
GetErrorInfo
psapi
EnumProcessModules
Name
.text
Size
Virtual Size
18.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
15.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
13B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.qtmetad
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.egE
Size
Virtual Size
11.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.ov=
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.l33
Size
29.6MB
Virtual Size
29.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
339KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect_Con(1).exe
- IMPHASH 5fcf806208f3c2cf7d6996b4074ec22f
- SHA256 ab07118d87b23fef6c1f7f65240756a409e57cce8901a964002270349130588f
- MD5 aba93814922465c24b585d42bee3b62f
- SHA1 b313f5efd803a56b6e6f4358b20de7db4393901f
- SHA512 2d81d20aa0f91ce0b698612d3f315f52c64c671af0e848e29b94aed00d0ddf8f13e1087c86f4d46389559ed7ec3dc49a4a74ebce5bd78d91602d24c1b1578958
- SSDEEP 393216:eZEpFa+Fsc68exgXU+cNh3WPK5bQ/3U12uxsvG+o//VQOx/:X5IgXQN8S1Qq2uxp+o//VQI/
- TLSH T1DF27235E6CA1F2C8C7C905B12A4605C931D9ACCCC4EB4725328A6D06BD76E7B4EE9D33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
71:fa:25:5e:f2:dc:22:78:46:a3:3c:14:5d:3e:bc:6e:44:bb:dc:f8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Chains
Jul 22, 2023
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Serial Number
07:25:df:15:2a:5b:89:92:f3:68:49:ae
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 23, 2023 - Jun 17, 2026
Minor OS version
2
Major OS version
5
Entry point
41373276
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
ole32
CoInitialize
psapi
GetModuleInformation
shell32
SHGetFolderPathW
Name
.text
Size
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
10.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
Virtual Size
572B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.k5h
Size
Virtual Size
11.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.+W0
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.o{7
Size
20.6MB
Virtual Size
20.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
260B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
339KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect_Ultimate_v3.8.4_Build_1754/VMProtect_Con.exe
- IMPHASH 5fcf806208f3c2cf7d6996b4074ec22f
- SHA256 ab07118d87b23fef6c1f7f65240756a409e57cce8901a964002270349130588f
- MD5 aba93814922465c24b585d42bee3b62f
- SHA1 b313f5efd803a56b6e6f4358b20de7db4393901f
- SHA512 2d81d20aa0f91ce0b698612d3f315f52c64c671af0e848e29b94aed00d0ddf8f13e1087c86f4d46389559ed7ec3dc49a4a74ebce5bd78d91602d24c1b1578958
- SSDEEP 393216:eZEpFa+Fsc68exgXU+cNh3WPK5bQ/3U12uxsvG+o//VQOx/:X5IgXQN8S1Qq2uxp+o//VQI/
- TLSH T1DF27235E6CA1F2C8C7C905B12A4605C931D9ACCCC4EB4725328A6D06BD76E7B4EE9D33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
71:fa:25:5e:f2:dc:22:78:46:a3:3c:14:5d:3e:bc:6e:44:bb:dc:f8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Chains
Jul 22, 2023
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Mar 18, 2029
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Serial Number
77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47
Issuer
CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 28, 2020 - Jul 28, 2030
Subject
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Serial Number
07:25:df:15:2a:5b:89:92:f3:68:49:ae
Issuer
CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 23, 2023 - Jun 17, 2026
Minor OS version
2
Major OS version
5
Entry point
41373276
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetVersionExW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
ole32
CoInitialize
psapi
GetModuleInformation
shell32
SHGetFolderPathW
Name
.text
Size
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
10.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
Virtual Size
572B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.k5h
Size
Virtual Size
11.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.+W0
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.o{7
Size
20.6MB
Virtual Size
20.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
260B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
339KB
Virtual Size
338KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect_Ultimate_v3.8.4_Build_1754/unins000(1).dat
- SHA256 d60132015aec46992be668e7c7e9d9e2a8507815072a5ce9e62dc3d4483a924d
- MD5 ab49a846654c85f06d3f6348831e1780
- SHA1 1ceab83ce8488f00a4a7bced3a18b83a03db6d48
- SHA512 822ce3f5389fcc2932e39d2ed7a52f91064378e8f40728be8c7016310503fedabf23b6b342d5b7ea0b9dc88530d1e00d5b46ae7e2ee8b92fc57c994a97a69354
- SSDEEP 384:YLmbPIscV/ODUOY0pxg8WSJDEzteXbkAnn7P787M7T7pTninZnXngInI4yuzkSx1:ombiV/ODUTzthIez9
- TLSH T1A063085073F87664FBFB2E792FB906605E3779215F11E50E1494828E0929F9ACE24B33
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/unins000(1).exe
- IMPHASH f62b90e31eca404f228fcf7068b00f31
- SHA256 c7edadd58b4ac762efab9f07959d2e540bf40e74c0715d9b825a99ddd61c6c10
- MD5 1103dca22af99807a8e769b99e550aa0
- SHA1 567936e39f500597deb647a0141d9b4670819099
- SHA512 c6fae5349785ada698920e620c51583b5192d9bb4974d48544b5ef6ee10eb60e1a43a9018037351ab7b9c350f92f84147b4369b91360893d88f3dd744a3fb9d3
- SSDEEP 24576:cKbqslNoiGO+h84C6f8HSCNFfoJMpNOErZTOzu5xTxytw:zwY6fULNntNXX
- TLSH T1C9451822A3E68437E5732E759D6BC2945C267D202E74E44E7EF88E0C4E79B40BD35392
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
1048580
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
RegisterTypeLib
LoadTypeLib
SysFreeString
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
SysFreeString
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
GetUserNameW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
WaitForInputIdle
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendNotifyMessageW
SendMessageTimeoutW
SendMessageA
SendMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
ReplyMessage
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
OemToCharBuffA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
ExitWindowsEx
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
CharToOemBuffA
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryW
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCurrentDirectoryW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
lstrcmpW
WriteProfileStringW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TransactNamedPipe
TerminateProcess
SwitchToThread
SizeofResource
SignalObjectAndWait
SetThreadLocale
SetNamedPipeHandleState
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
QueryPerformanceCounter
OpenProcess
OpenMutexW
MultiByteToWideChar
MulDiv
MoveFileExW
MoveFileW
LockResource
LocalFree
LocalFileTimeToFileTime
LoadResource
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
IsDBCSLeadByte
IsBadWritePtr
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetShortPathNameW
GetProfileStringW
GetProcAddress
GetPrivateProfileStringW
GetOverlappedResult
GetModuleHandleW
GetModuleFileNameW
GetLogicalDrives
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumCalendarInfoW
EnterCriticalSection
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateNamedPipeW
CreateMutexW
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CompareFileTime
CloseHandle
Sleep
msimg32
AlphaBlend
gdi32
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
RemoveFontResourceW
Rectangle
RectVisible
RealizePalette
Polyline
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
LineDDA
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
Arc
AddFontResourceW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
mpr
WNetOpenEnumW
WNetGetUniversalNameW
WNetGetConnectionW
WNetEnumResourceW
WNetCloseEnum
comctl32
InitCommonControls
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CoInitialize
IsEqualGUID
CoDisconnectObject
shell32
ShellExecuteExW
ShellExecuteW
SHGetFileInfoW
ExtractIconW
SHGetPathFromIDListW
SHGetMalloc
SHChangeNotify
SHBrowseForFolderW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
Name
.text
Size
1015KB
Virtual Size
1014KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
24KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
60B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
VMProtect_Ultimate_v3.8.4_Build_1754/unins000.dat
- SHA256 d60132015aec46992be668e7c7e9d9e2a8507815072a5ce9e62dc3d4483a924d
- MD5 ab49a846654c85f06d3f6348831e1780
- SHA1 1ceab83ce8488f00a4a7bced3a18b83a03db6d48
- SHA512 822ce3f5389fcc2932e39d2ed7a52f91064378e8f40728be8c7016310503fedabf23b6b342d5b7ea0b9dc88530d1e00d5b46ae7e2ee8b92fc57c994a97a69354
- SSDEEP 384:YLmbPIscV/ODUOY0pxg8WSJDEzteXbkAnn7P787M7T7pTninZnXngInI4yuzkSx1:ombiV/ODUTzthIez9
- TLSH T1A063085073F87664FBFB2E792FB906605E3779215F11E50E1494828E0929F9ACE24B33
- MD5 SHA1 SHA512 SSDEEP TLSH
VMProtect_Ultimate_v3.8.4_Build_1754/unins000.exe
- IMPHASH f62b90e31eca404f228fcf7068b00f31
- SHA256 c7edadd58b4ac762efab9f07959d2e540bf40e74c0715d9b825a99ddd61c6c10
- MD5 1103dca22af99807a8e769b99e550aa0
- SHA1 567936e39f500597deb647a0141d9b4670819099
- SHA512 c6fae5349785ada698920e620c51583b5192d9bb4974d48544b5ef6ee10eb60e1a43a9018037351ab7b9c350f92f84147b4369b91360893d88f3dd744a3fb9d3
- SSDEEP 24576:cKbqslNoiGO+h84C6f8HSCNFfoJMpNOErZTOzu5xTxytw:zwY6fULNntNXX
- TLSH T1C9451822A3E68437E5732E759D6BC2945C267D202E74E44E7EF88E0C4E79B40BD35392
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
1048580
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
GetErrorInfo
GetActiveObject
RegisterTypeLib
LoadTypeLib
SysFreeString
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayGetElement
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopyInd
VariantCopy
VariantClear
VariantInit
SysFreeString
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
InitializeSecurityDescriptor
GetUserNameW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
AdjustTokenPrivileges
user32
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
CreateWindowExW
WindowFromPoint
WaitMessage
WaitForInputIdle
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursor
SetClassLongW
SetCapture
SetActiveWindow
SendNotifyMessageW
SendMessageTimeoutW
SendMessageA
SendMessageW
ScrollWindowEx
ScrollWindow
ScreenToClient
ReplyMessage
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PtInRect
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OffsetRect
OemToCharBuffA
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsRectEmpty
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
IntersectRect
InsertMenuItemW
InsertMenuW
InflateRect
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageW
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClientRect
GetClassLongW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
ExitWindowsEx
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
AppendMenuW
CharToOemBuffA
AdjustWindowRectEx
ActivateKeyboardLayout
kernel32
GetACP
Sleep
VirtualFree
VirtualAlloc
GetSystemInfo
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
SetCurrentDirectoryW
MultiByteToWideChar
lstrlenW
lstrcpynW
LoadLibraryExW
GetThreadLocale
GetStartupInfoA
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetCurrentDirectoryW
GetCommandLineW
FreeLibrary
FindFirstFileW
FindClose
ExitProcess
ExitThread
CreateThread
CompareStringW
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
CloseHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
lstrcpyW
lstrcmpW
WriteProfileStringW
WritePrivateProfileStringW
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualFree
VirtualAlloc
TransactNamedPipe
TerminateProcess
SwitchToThread
SizeofResource
SignalObjectAndWait
SetThreadLocale
SetNamedPipeHandleState
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
QueryPerformanceCounter
OpenProcess
OpenMutexW
MultiByteToWideChar
MulDiv
MoveFileExW
MoveFileW
LockResource
LocalFree
LocalFileTimeToFileTime
LoadResource
LoadLibraryExW
LoadLibraryW
LeaveCriticalSection
IsDBCSLeadByte
IsBadWritePtr
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
GlobalAddAtomW
GetWindowsDirectoryW
GetVersionExW
GetVersion
GetUserDefaultLangID
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetSystemInfo
GetSystemDirectoryW
GetStdHandle
GetShortPathNameW
GetProfileStringW
GetProcAddress
GetPrivateProfileStringW
GetOverlappedResult
GetModuleHandleW
GetModuleFileNameW
GetLogicalDrives
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetComputerNameW
GetCommandLineW
GetCPInfo
FreeResource
InterlockedIncrement
InterlockedExchangeAdd
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
FreeLibrary
FormatMessageW
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumCalendarInfoW
EnterCriticalSection
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateNamedPipeW
CreateMutexW
CreateFileW
CreateEventW
CreateDirectoryW
CopyFileW
CompareStringW
CompareFileTime
CloseHandle
Sleep
msimg32
AlphaBlend
gdi32
UnrealizeObject
StretchBlt
SetWindowOrgEx
SetViewportOrgEx
SetTextColor
SetStretchBltMode
SetROP2
SetPixel
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
RemoveFontResourceW
Rectangle
RectVisible
RealizePalette
Polyline
Pie
PatBlt
MoveToEx
MaskBlt
LineTo
LineDDA
IntersectClipRect
GetWindowOrgEx
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetSystemPaletteEntries
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetDCOrgEx
GetCurrentPositionEx
GetClipBox
GetBrushOrgEx
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
ExcludeClipRect
EnumFontsW
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePenIndirect
CreatePalette
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
Chord
BitBlt
Arc
AddFontResourceW
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
mpr
WNetOpenEnumW
WNetGetUniversalNameW
WNetGetConnectionW
WNetEnumResourceW
WNetCloseEnum
comctl32
InitCommonControls
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Remove
ImageList_DrawEx
ImageList_Draw
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
InitCommonControls
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
StringFromCLSID
CoCreateInstance
CoFreeUnusedLibraries
CoUninitialize
CoInitialize
IsEqualGUID
CoDisconnectObject
shell32
ShellExecuteExW
ShellExecuteW
SHGetFileInfoW
ExtractIconW
SHGetPathFromIDListW
SHGetMalloc
SHChangeNotify
SHBrowseForFolderW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
Name
.text
Size
1015KB
Virtual Size
1014KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
24KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
60B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
101KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ