VMProtect Lite 3[.]10[.]4[.]rar

resource
unpack001/VMProtect Lite 3.10.4/VMProtect.exe

resource
unpack001/VMProtect Lite 3.10.4/Lib/Net/VMProtect.SDK.dll
unpack001/VMProtect Lite 3.10.4/Lib/Windows/VMProtectDDK32.sys
unpack001/VMProtect Lite 3.10.4/Lib/Windows/VMProtectDDK64.sys
unpack001/VMProtect Lite 3.10.4/Lib/Windows/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/Lib/Windows/VMProtectSDK64.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/VMProtectSDK64.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/bin/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/bin/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/bin/VMProtectSDK64.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/bin/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/bin/VMProtect.SDK.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Lib/KeyGen32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Lib/KeyGen64.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/TestApp.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/bin/i386/TestApp.sys
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/TestApp.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/TestApp.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/bin/TestApp.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/bin/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/bin/VMProtectSDK64.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/Net/bin/TestApp.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/Net/bin/VMProtect.SDK.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/TestApp.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/VMProtectSDK32.dll
unpack001/VMProtect Lite 3.10.4/VMProtect/Scripts/Delphi Resources/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Scripts/Environment Variables/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Scripts/External DLL/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Scripts/Random Section Names/Project1.exe
unpack001/VMProtect Lite 3.10.4/VMProtect/Scripts/Script Events/Project1.exe
unpack001/VMProtect Lite 3.10.4/hola_mundo_x64.exe
unpack001/VMProtect Lite 3.10.4/hola_mundo_x86.exe

VMProtect Lite 3.10.4.rar

SHA256 de96f6b6550340d47915501861d0bd2728660827b916490a9bee69463936436b
MD5 d00fa17c633516ad505d5468bb0597cf
SHA1 f763fa8bbb56dc018052ddec9821a7abd9926a68
SHA512 f680b80fc48317498a2b3ad9f41feb7ae9a47bdc8f7bb478b8b3c9d67966cc5b0e060ea444e32b46549c1c3cb2a4a7b0311e88122cbfd3460326c2842e553148
SSDEEP 786432:bhbCdeK8lV0FkIfeHmIsWJTetVju8k74PTJ5cxNP4F:1bCdeTlVqkIfeGpMiu8U4rJ5R
TLSH
T10087336052E331BE1DEA8189531BEF55BE4A75CD84329EE5F8654D2EB3CF9B0E163800
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Help/.en/_23.cfs

SHA256 fb5438a535701f7251e07c3f3f27ae9babcc60401c8bcd1bc73ccd0c8c5d17dc
MD5 f1d1795555de9d3d474368dc25188e6c
SHA1 3eb75e39d66fee747595a5a1ec8a27708d5a15e4
SHA512 9b73158a968fc5304b114882cc801122c31e652f58295afe2fd476beb1a5eaa27e3acdc57485c1e11cb0c2bd274d57e6709fc944497c06b72bed5983859ab149
SSDEEP 3072:3eQAt8RDAp+2xQiaickZF0h79Dz7UXKhp:xpRDe1xN0h79DzwXgp
TLSH
T1A3A33A43E03334D3FE45017386679A0A37A1B3876E63B34A6ABD5368DB231C64FA2557
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Help/.en/deletable

SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
MD5 f1d3ff8443297732862df21dc4e57262
SHA1 9069ca78e7450a285173431b3e52c5c25299e473
SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/Help/.en/segments

SHA256 2556818e0166daad36798db31118c575eed8d94821b1b86d68124f52e034e418
MD5 7f9f3cb4b9d87551c4e9641f6863cb6a
SHA1 dd8d1f3b3fddf3a110dcd923155ee36a2f48bf0c
SHA512 f2a5c236e6e083d494ba389c7a455f0b254d1ca147b05f450888b0dcd7fad120071fa23ff8d6d517cdca23b089fc61aaf068d1b367788357383d3a4ffaeedaac
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/Help/.ru/_23.cfs

SHA256 f0eeef2b608350db06c14d3c0b5eb42bc98132fd9ce11e47624bc1247aed1420
MD5 e4576691785b3f9d83f5c84987327262
SHA1 fe08f128659f9d9a075ef6ca3e8db7026e490496
SHA512 6e7533f7a8abe8762a06ffd0a66ccf90938736b9b34a53fee023ecc9cce289a287ab87394a90244ef74cb8c004dbd631becf11378beccb2d757ca4e16129b066
SSDEEP 3072:wS+czGzAP1DETy0wWWEB9bPwmkWQLPYahDYMcpIpJpmev4aQv2yqK:DpzrTuBlQLHuIseVc2m
TLSH
T180E31B32D02BB5CDEC0024A7C8252A053E9663BF7F976366167CFD78B6B35848D39246
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Help/.ru/deletable

SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
MD5 f1d3ff8443297732862df21dc4e57262
SHA1 9069ca78e7450a285173431b3e52c5c25299e473
SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/Help/.ru/segments

SHA256 7912213e2f08c8fb5f93d364ba0d439009f9bb1fc431afa379a0ef0af99a703b
MD5 cb971d50169c23cd4f1a3160679f5948
SHA1 91a8cb4655aa499ba8a8c9b4b2c7b330c3ea2bb3
SHA512 ae9b9e1c7e3fdb16e7a68457b92efb06e2027a5d404e5e9cff90c616ad8d078c9066ca9c44d61ce25af6426201171761ece136da38f13331403c9d75c71c6e1a
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/Help/en.qch

SHA256 90e9c80c8466e6132bb3d28d17e0abf29d9e88c9ff986f84a64e0f9bbcee9e83
MD5 da523c2da049d556f937dcc84d061e0d
SHA1 a8e7830b4acdc4208ca88d80b2122467b331b6b3
SHA512 2e76fc241cd0756f10d7b79fc290263143bae8d4725ab2e601553d8a6f9d6537de6c9e64b595c4894fa8e102bb093199b3f740c06a6c1d2587c1aff6b37d4483
SSDEEP 24576:mpbpXVUXyDT0f6I87HCoot6wzmdqZ4RpFlHP9f7dhBt0zMklqIBHZN3elaWn0gjb:xiMf8HIxmR15hBqzFHH30aWnLGH0B
TLSH
T105752341874BBE1BF78B4634B83A1611DD33363DD122E229611DCA9D6070BA611F9FAF
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Help/en.qhc

SHA256 65a16d0730b9420fa5a29ba307d3cc68acf4b5982219ff672cd6654c15ffae75
MD5 0db44fa8ed3ade67aa2c4716e50921ed
SHA1 a38f757ca1aa45238445e030640f4c11c2c243c2
SHA512 397c71bc662cf1e7e24fe01b21b0fc4c2c2955b66c1a51dd19892bc2ea5af126e237fb29d248f99ee54fa15eb1110f1b92333f1b47f8aa623459f2b4f7990354
SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbgl284IqmmTxXHiedmX/pyLXrmUNmXM:gHn3qUqeRF/u+dd62xIqmmTMeWQmUmM
TLSH
T1D9F1C2D64B1A7536FED2C1B7F41252351D38228E0073C8F568AE63AB08535869A5BCFF
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Help/ru.qch

SHA256 c49c4e0105d4753b2ab1af70f9631dcdedf023bc09299076a7d79988a818b627
MD5 b98c9fcec78dfffe1d3e13cb022f1eb4
SHA1 eb9fc3d200cf9fc04d0b406a5a806d08743fcc8c
SHA512 3c1f46b1a9da157a410e81d0b2a1fc5718b56d63c84a9434e0d245e03ddeda0fa0860b0774dfbab41b98f98559ed5f62dbf2a47a1df30d45057f01b0764463de
SSDEEP 24576:epQp/VZ2kFSDQeohDV/goxG4HjsELPeaUhQqIFabsnFLHfOGbH8LgvzP+sahM4ls:J2aSMeohhHsp1IFaonjbcLAzP+ZOzt7
TLSH
T173753300B30AF422E7CB1A3C55236B76AEBDB53D5596E217325CC8ED60B4B06907C8DB
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Help/ru.qhc

SHA256 b386d55fa0acef53870bea201468b8393361f09bd828a242f7bf9d3c19327740
MD5 aa37fe2a672fc1fca01d291f253ff6da
SHA1 b5f709c03c17f0c1b48656a685884dde31352f97
SHA512 d6a8a989eb82917b672350e9b741808fd68ad277802588fa260f16d259d9d8811e084e820d0a26d29e7312bd84258da66ce727c0b866aa820933b273411c9ed7
SSDEEP 24:rVmNpHnM8hq8FqeRFFFujivFhMutbn2l284IqmmTxXHiedmXLTyLXrmUNmXM:gHn3qUqeRF/u+ddnQ2xIqmmTMeWOmUmM
TLSH
T133F1E2D647197432FED2C1B7F40252351D38228E0073C8F169AE23AB08535869A5BCFF
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Include/ASM/VMProtectSDK.inc

SHA256 fbef4175ad9de7bd12d6f206c278c1db27fd969f3d80fe7eed0dacf868ac1258
MD5 74e11b2a2530e65bccd69618a9f9233e
SHA1 c0d8f10acad9c228adb7e949e65d3400bbd5c85a
SHA512 c0f5a5ecc753d2dab9e1403faac61876f30dc9712273ab6598dabc17ae71c242ab1296b84c4b43292071594215629da0013a6e7d19251fb43d405ce9ff56dd5a
TLSH
T1EF4124029524368EC0AB48B57A25BC903C97F99553FCEB6F60A50803134312DE7FCE9B
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/Include/C/VMProtectDDK.h

SHA256 eeb099b49d4613c25bf594778423eb336d85fbe6f19ed1142d2fb67570a6a259
MD5 63047d84ccc63bddaeeee7bf6c4f772a
SHA1 4b77639f90ecf25740f4d917ebbf6adebaeac083
SHA512 2ebea6d5c1c50319271d115e157da361ae186a625e969242330ed3ca45858f5d93d4a0935dc50a5382129fba5ddb1b438ea0e52054812dbac7ce46f16d306692
TLSH
T12561C1410D01342AE192D7F5172BDC6125ECF52335F6DCEB261634125BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/Include/C/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/Include/Go/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/Include/Go/vmprotect.go

SHA256 23bba47bc7bc5f76c3653a279db297e0bceb587f0fa676fe8a8f9c3ade21212b
MD5 4e57f66465e381bed7528fdcc988db10
SHA1 ee1b5accb4b90dc0ba2561ff409024b72124822f
SHA512 622994abfd80f73e1a76b0140482348aa3610a94d9c60db35b5a9ccb440d97d1bb471c6796757853fb6660f7b62fca05828dc82af7a153d342ce9a2983a8a601
TLSH
T1D45105420A92A50FD0E351652E65FDD07CC9B1239DE2C1B7B18C42E163EE05D7F3CA6A
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/Include/Pascal/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Include/VB6/VMProtectSDK.bas

SHA256 84593433973f8040f33aeb52275b882e1ad35463cf4bebd5033931a01d85d2bc
MD5 02c7735bd54a41842ae9f1e4d94b4b88
SHA1 58f144805d56beae2fe54ce88c25047b11e30fc8
SHA512 d5c278592472d95ef57a6305ef5cb94139fe6f91695503286c4fd05c39ee45a746658791f2296b16419af8af357aa0aa35aef122f3c43a064f89a0bc95bf3e14
TLSH
T1C1816C9AE610BCB9C89560E43127DCEB7DEC62A539B9D391403462CF0FA2CCC2795677
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/Langs/de.lng

SHA256 dab153df460335ab4e4eb7a0852f6d200f927050833306b66521b0b6d2ed7ba1
MD5 4aaaa44211736e5b347ec72f2a6ad3e3
SHA1 34dd8befdd7652917edda558cf077bb5209aa294
SHA512 0318eb6870cfc45cfc4f27ab18e6bbc3f54f3e536ca59321b5bd85796954f8ae054ba81c03a0208dd340b72c28051b32b307f9dc1661e79f201f3902e46dd8c3
SSDEEP 192:H3zwLBFkci/5bGvepbAG2Rx8RLcZZ6vsd3laso2Qo+QbHG3u2LkPcqR0ZJ8/dqd:zP5bxepxaO1laso2Q8S6sbd
TLSH
T1832208119E05228FD3C32BB77541CC6B3BB4C36913B420B7549CE3E44B93C76AAAD5A6
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Langs/en.lng

SHA256 2072728d9bc45e3d0102b34341d9c29a8dd10edc49e31a5cad4bc13375f231ff
MD5 848762f6dcc787b501e56ced23d9444c
SHA1 ebe80249b2af12df09f54db8837a99c9120cc193
SHA512 79876965ef7b3738f18054c25dac1a746156df3462e492cda4ebe2a659057c5442d458f1bf2e69acb418b986091c2421f2986f606e096b78f44578e57998f194
SSDEEP 192:09XdBpvobEuyxG7ywEeb/zHsbaOuriZr0bkz+7+WpnlBf:udBWbEuQG7ywEeb/Pgr0LpnlBf
TLSH
T1AFE1B8093700329BB1C715B7BD918C5B19B082296578105B1C5CFBD00FFBE28BA9F6E6
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Langs/fr.lng

SHA256 685f7c8d1face95440d09c7a68a03cd59e09eaa4488ee1106cadd2f24f8c4e66
MD5 c374c2ae3cadc61cec7008ede01e7a10
SHA1 5cb64e6c6caf1d92cd9f6714e090676e10827a54
SHA512 6535dabdaff7e544cb831f9f9fd665ed3733680045e2917e6dbea5a7a283bafc7f35f97209a22abe89166b7a90fc66a52fa15f69fc1ea98d06d0f7e654f0a7ce
SSDEEP 192:uEVf8Yo6j4hmIj3N9YnDwRjEZNyD1dCckWBqtDxwvK27ISMiUC303G2bfv5UiznJ:Q4Ej99ODw1W4dCcJBqtDxLizQGwJpznJ
TLSH
T1CB32B60DB680354B52C312F7B552D913AA74C3186619F2554CD8A3B426FBE3CD38F9A6
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Langs/ru.lng

SHA256 3525797445b75bb176c4e9f6ffc0c4acd6f7f25d74dca6655f9512e782a49a53
MD5 5b4ca9426a5c39bf4006e204a2bceaaa
SHA1 6c03b14a2651e80933448ba1e9ae8cad730b232d
SHA512 6f872a815f3fa9b2831e4423a504fe7a21201549f652b64a17db74b2fa200774bf1b4d9118d206a227108c380c854366020d75eda64181d18a0e5d8caa3c99ff
SSDEEP 384:Xr2mIZLqvf0Vu7Ebi0FxF71Ki4aRkjEPve4wt8V3rsr92OQqa4k:Xr2q7SxFRRDu92OQz
TLSH
T15BA2F34FFAFC5114B5B6DA40AF3189D206FAB7102B19C09D86CF2C5A1478AB477227E7
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Langs/tr.lng

SHA256 8fec846785bd0aa54b4e507f2a072e4334e4da945f8e12d419a97b8a8227d5a0
MD5 13a807a87d7b2742284913ddadabd500
SHA1 eedcd2ed40ff3cafe7d57294cb12bcf179c7bfa6
SHA512 106de1bd0a225610563238f2aa5791f6a1d7882e523773928a4c8e91aa27d470cf585956390df52e2c2bd940a519671747d20c70568c06cd2d157eeb922f341a
SSDEEP 192:biD5Sk089KwYfXwIDIbTDhWMTP8wZWGedlm3xb7onkUF43IZjpZKMK/0AYauqz6:GS789KlXjDIbTDhWMTP8wfeDm3xvoV+g
TLSH
T1BE22F9493233421AB76317FBA9929D272579C82C31215CE30CD47BF15A63F4A9256FAC
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Langs/zh.lng

SHA256 34fc38d7920f58262fd7383a600e40734d7a13b544a5cbee4b35fb56f2c15db2
MD5 dd1e1841834a11e82bcfb22fb51da691
SHA1 eb515d0408a61997d44aa526993064b9b2910f17
SHA512 808edb5e96c16e5b5a77b8ebe26db495ba57716f9f0d4f426bbe4c13543cd14fbffe149eb0201649d3cea9adf4cab7928c7c97ff01ac78216de9a69b7c57869a
SSDEEP 384:ENm0bnMYC5qftk8ns3CMUitEJURqWRBaOzI/9XPZO:ENmUI4n8CMQSRdzI/9XPE
TLSH
T1F252640127FE5018F6F75F98EAB894664BBBBC261E1DC12D95C4404E08B1E808AB77F3
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Lib/Linux/libVMProtectARM64.so

SHA256 00aecc09e863c526c691b8b5c2fbb513a8f48b763fd18225015318a756e32656
MD5 57a740a420b55397b7facc447995a73a
SHA1 49e3e7b24ec32aff2004e4087e2e3bf5b3e53f86
SHA512 d11fc0fbc04dd466ab6ae6d14ca49f52f0bd09b126f0313a11a7548c77e77b2b197594549ede836d8a6114a47576da932cb2f08a381da94241b398d79676bee8
SSDEEP 768:aDECFjDjCiM0e8AJ5+IsZ2eLORxrz+4CAbdP2QW1:W/jDjzTAJ5+tZHqfEAbdeP
TLSH
T1B903B706EB80EE2FC4DD5374656B4F6413318018939FE757A12502956E933CEAFAE2CB
MD5 SHA1 SHA512 SSDEEP TLSH

linux aarch64

VMProtect Lite 3.10.4/Lib/Linux/libVMProtectSDK32.so

SHA256 7e73d0a80d90db432a87e6daf075ad2add7cead3918c6025094fa8df8ade7f0c
MD5 1e619078dd43b175f220e37b9ed824c5
SHA1 f915a98d0a7134694a2de1efe244135ff909fc7c
SHA512 be6eeb90cd18bc0d097293f94be631714b4985420dd21be5e703efdfbe8c427a4c2d650557a1508b53683d5bc053c677a3dd08d03a326ac64cb1ea017e2fe8e0
SSDEEP 768:1q6qsfBcgboedwWi4W1TDzRW/tX17g3VMx:IsWgbobJv1DRW/aC
TLSH
T1F7E21947AF84A93AC4C60575126BCF191336C0724EB2CF53B62847645E933CDAEA728F
MD5 SHA1 SHA512 SSDEEP TLSH

linux x86

VMProtect Lite 3.10.4/Lib/Linux/libVMProtectSDK64.so

SHA256 5bd072d40820b70383a059bb0a8ace695fcb3e526a643dd21d0528b5b9b0f5e4
MD5 7fb8f3b45b0432477f5fd1e21a8c1673
SHA1 531691a33c1ee41d31c4bffcc7a66172c02bab62
SHA512 fff085406ad2b0f858bad3a7c546c621cff91252a169e44ebf91af9ab62586a352894c5cedb402dad21044fbccae4fa0d26d3f8209c987fca68a64f7c50dd311
SSDEEP 384:luE6TFC8ojUq3MUibTD4LO3U9f3sXVTbpgK+gxo/A4/o3i3tbzMRaOdm2xN:lL6TapAD4LOsJKFob/Ai3tbaaEvN
TLSH
T12F031A47AF84EE3FC4ED4371A55BCF5C1330A05087A6D71B221482A42F577CD6EAA28B
MD5 SHA1 SHA512 SSDEEP TLSH

linux x64

VMProtect Lite 3.10.4/Lib/Net/VMProtect.SDK.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 774ac5f0e7f795ba41cf4ff3ce09e3a2670b862831083778a4140894e4f1d125
MD5 396ac889c048603a575d05541f1c1311
SHA1 061834b997aaf5c3e629e0a0fb9afb099f15f2a7
SHA512 d55198bdcf80ea29c850c9f12c911bf81f44510874678293ac921601e457c9d060011d780881bb3a6108d5a754f519ab270bf02628bdb1ed63092d49873b03b9
SSDEEP 96:SbeBWY8lNW5lleUWbgjaJvbdI8cH4YJNSscbNVOz8RpFxrPOPXCr3c7+AsLtFSVF:EY8zWUUOgjSjR+JxzwFxrxA88
TLSH
T10F22B712B3E8A156F5FB67356D7211310BB7BA994A72CE3F148C010F0B37A546BA0B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

15898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/Lib/OSX/libVMProtectSDK.dylib

SHA256 d335780968e5e8742ebd8f748fb2ec372c4f1a5922cfc0fd64c15dc8921be41f
MD5 4250f8ab6e2f6594779a511c69964a22
SHA1 fb86ba0a222a1f382a62822e966fc44607560d33
SHA512 9c9b13d974f1e38a587ea1b0fd761b91a2cc69b26e752b0102ee11c97cf9a8945f8bebc07966b42b86b1ab407373abf9b048a046365a5bff7b1272869292be17
SSDEEP 768:gC3w0MnwZI1l1d4x02QsiURWO9aSIlpJ73IKaQfF19YR0WwMykBGetF5+ss24d6u:VKnwUhz38y24dpt
TLSH
T145C3F917EB05A427CA8D90F4929FCF6AB035F16011B7C763B661D1682FA67883E5680B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:arm64 arch:x64 arch:x86

VMProtect Lite 3.10.4/Lib/Windows/BCC64ELF/VMProtectSDK64.lib

SHA256 b1262e6e80f3bb34ccd4270ec9b9d040fce9e85ee5f07c86b48f8c86e0417359
MD5 c8741887d6a3e009abbfa2402218b0bb
SHA1 6c0c3707bbf1819f656ca3697f1dba270db1dbe2
SHA512 1ceacd9c489a7b993869a7dfdcb44323e8dd1907b16aeb8beba95ad408a72f23f7fe1417b775dcd7007a83733e9a8c8d739c66a1276129b08e7e1d7ecd4aa4ee
TLSH
T17751FE1C8981392FC4F690F93722DDB4B279804681F2C757710E63A08B633CF6B9668B
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/Lib/Windows/MinGW/VMProtectSDK32.a

SHA256 2172b716a942408e94c6a2dc0d6c9ad1078e3388a748fd1a2a05b3c22086469d
MD5 85ec3bdcf59e7d18ec4e28f855c66fe0
SHA1 2eff7ac3eebba5fd7081ab2df964caefdca96ed0
SHA512 e4b199521f6d90ba1f9172872e97d51254040ac1ca0aeadf757051cf74aec63a81e118e89c58fd1cc9d196dc16aac2f115a9c6b06cc4fe32e245a7ebc91a152d
SSDEEP 192:f6gR08VksnJIAqDryMNNj3aNcsGI0BvMtun7j:1R0CoMFW3
TLSH
T12492D2B2B2925DCBD27241BD9647EF11273CF0E249A6DB33322C65610BD1D8A3EC2587
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Lib/Windows/MinGW/VMProtectSDK64.a

SHA256 074389443c148fb836c160df6bdd97ffa9a3615191098e9e5ca62b7db33cc225
MD5 eb5af2d49eec030fac96ebd4c19bac62
SHA1 e919f4260d07843d3995707254b70396273f43fa
SHA512 891baf622cfb96adfa6844903409a7c1d05456d0d62cfe6f85becdf0ea9b7ac0c28d579e0d6883d3b04a8f8e507d9ce727407ab890ea8faa61f43bd5971c40e4
SSDEEP 192:RuZGP2eTY6AfBZQ9MBiGZQUuK8tLjMKSA:Rm2
TLSH
T12682F1B2F2E25D9FD67181BE1656EF212B7CF0D20166CB27322C19210B96E863FC5587
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Lib/Windows/OMF/VMProtectSDK32.lib

SHA256 06497f7b7d9670bdc832506b00707eae521f310eaaa5998ec6f6f4bdfadc1e87
MD5 0e1a96050ea2afc299dc4d05a327b044
SHA1 0627d91000c0e06c4a8d8c80d257ffc709ceb688
SHA512 309518a1a6d23843f675d0e2173f0f85f5adc3049eed9b91b8cbe64796d8ab166ca0f9dc82c43c85102cdfa2b8e54978a459fe097486f2ead6557e00288e3f46
TLSH
T1BA71373A19513A6FC4E390FA2A56CD9AFAB471D51AF1C573A7A111BF0F2E08C372504B
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/Lib/Windows/VMProtectARM64.dll

SHA256 95c36dbc84fde8674c4d47c68f2a0a575e92ba136fb54100bb14ec680cabad8d
MD5 18d63414f1f53d12cc74287106e40e7b
SHA1 96abc1e430d9fa4b8e7c0bc230b5ad63d44253ad
SHA512 a376bce05866cf84f1e656d379e75fcf9ad7dd4910a5667b44d5441f10885625674c0c07b307abcd89d86182efca14b305fcb565945995a57d3066f118d60aa4
SSDEEP 1536:XBUJ1mU+JN4aJK0gHLhAJoei31yskAT+CRQJTv7sWv0dPgy:XBUv6N7K0+h4G5k1TleP9
TLSH
T1A4B35C53B78D2807E1E2DB38F8574F50633FB97484248E4AB202425CDD97BC99F769A2
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Lib/Windows/VMProtectARM64.lib

SHA256 25c325113cc4802eee53555a38cf6a176eb0b37c7db08a5af29db2c67159b5a1
MD5 b494ffa5646ca6ebe73cb5ba9e83996e
SHA1 dae1cb854e6b672b3638e1dde69e7e4ceaf6a8b7
SHA512 c11bf9a3fa910948bf16ae636a84bfe7d29b1b49e072e8f4b6ccdeec0a6de26140f198c46c3253e9b85349346e1576294531fffdccb0504a6c9d6a521e2bea3b
SSDEEP 48:9ZN/k5RLRzRCRXB6cI15AXy/F/CRcRj15T17RLRyIBrJX4CKsyAOL9Kfp5qK/MpX:9PkqBi1bruCKdK6K/MWTbrno
TLSH
T1A1E1B9365950BC2FC4EAC0F93B62DCA4396D004602F2D47BB28D269243B275F67C368B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Lib/Windows/VMProtectDDK32.lib

SHA256 c57c4aecb44fecb050bb2cb41fda40e43c1ac9317460e89b09a7793020a70a9f
MD5 8808bdf95e8182f712897c9d0354a4b5
SHA1 c99e48bc4196244900ffb7fe03e51a93e12e544d
SHA512 891d31248e8e50b3fa64ce0c7d4f2e3e4ae399ac285bdcd30f2bfba4090b576a851124a318f41322f96bf1e9dcd588dcc7ec3324543006c3d85d06f77a4bb4a5
SSDEEP 96:Ekm/+uYlVlCKU3v/hknv/KzKyK578G9ZQu+:DVlG/h2fgbh
TLSH
T111F1AD376892BE1FC5F6C4FAF292DC983E2C344A02F5EA77701D418153BA5AD679A007
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Lib/Windows/VMProtectDDK32.sys

SHA256 5ba9aef8e17fd89a3a70e767878f099a9ed6d96b7fd83459864334cbbf401e7f
MD5 941f10363ef51c84a3076414d9430844
SHA1 b8724661b462a7df052a2c392cb7e18662162227
SHA512 35508e8a74a36ce6f7ee73cc1129c97ba42f8aec219ac20243f043a157c0744351a711bfd2ac6956b8fb88a8bc219ab7768f1912446072522dee4901add17009
TLSH
T15D5177068951763FD0DA81F93B66CC263438410153F6C3D7972107256B813DF3A3958B
MD5 SHA1 SHA512 TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/Lib/Windows/VMProtectDDK64.lib

SHA256 3e795303f1226cfaa7106116ed913ceac8e44b962d61435bf04b5d3c0462e575
MD5 8edc8488ecea779cb3fa811b67baea49
SHA1 a04d04050f1afe5f1c4d47b4fe3cedd420855011
SHA512 5821fac2b0d297b095261798c51bb50adf39d6b86a4d9ce015220335d63e050a3c00cca8557ef8b780afac57f133c0827701e1f5087fd0640e2b22f9367ef29c
SSDEEP 48:zZj/k5RLRzRCRXB6cI152Xy/F/CRcRj15T1sRLRyIBr/X4nKryAOjgKp35PKiRRb:zNkqB41CrgnKpKvKiObctJrH
TLSH
T1C0E18B395891BD0FC5FAC4FA7B22ECA97B9D104102F5E96B340D8B51836276FA387207
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Lib/Windows/VMProtectDDK64.sys

SHA256 6fde44b1b4c3e54f779938e49d3fd316baaa32dca241ac1459bb17a71f9c8dc3
MD5 b7108a75e768f7537ef1c2a441390e0d
SHA1 5673aef3246241d2100d0a48183343e547852a83
SHA512 a453e52e092afb337eb9f367db746c39e482a29209c7d7c5305d0b22c1baaf3669a7b83bff8efaae5d5419b997e4e5a1b11ac8ed44d65d9e05aafa4cbde13bd6
TLSH
T1C581DF02958135BFD4CA48F93BE2EC553678001953F3C1D7975217261B427DF323954B
MD5 SHA1 SHA512 TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

4096

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/Lib/Windows/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 6e59aef45a255799f550c09b6e52d7ae6e28e3af21414c6b11bc2e3091f352c5
MD5 4879172129a41fa9d51a8a68beacc71d
SHA1 63278e71360d6d1fa3a05d86de01946e2ec93da3
SHA512 1a2d2e329903b9f2b5f1401885ccd5c1fe64c92505bcfb8842825d58b498e9fbf249843951dc25d121fe8751c595cc8bdff0b9fda00149ffd60cec9f01b3f908
SSDEEP 1536:TB3bkLmdI52QC2mCYKw2cr2RhX4cSxpnnDw2C1+XroJQusWMIcdwIYXowGF:fhQC2mCYK3RhIcSDnk2byMJwIYRG
TLSH
T1E4A36B10B4D1C432E0BE19380535D5A15B3E7830EF64AD9F73941AB99EB42D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/Lib/Windows/VMProtectSDK32.lib

SHA256 6ff60abf1d453e0fefcd0ce0530556e229bf87079225e0c8a584fa16256d6853
MD5 8a4aba73d1eba6c5ac080e958d936937
SHA1 a397bd91f409b757e971571ca98a30b5b4a91300
SHA512 2b7fd093db797bf8ca05212393b8d4b152f55e6f4768bc8ebdba264ce09250888a29f572402b623c1c857a8e3e6b5e9b6aa64d6108cc6ac7b825f48af1bfd999
SSDEEP 96:pCm/+uYlVlLKU3A/hknQbK4KXK+teBcfGxkGzguz:cVlU/hpi1PQ
TLSH
T1C7F1463B18A23E2FC4FAD0F9F292DD99352C304604F6E667716D44D223AE58E679B107
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/Lib/Windows/VMProtectSDK64.dll

IMPHASH 1851ff453adce0cef5274e320d5bed3c
SHA256 ec3235136a4daee2a6f72c0f2994a8365ca8427c8068d068130b74c9fa64cd02
MD5 c0ce8c981bda19d2be17aca0774d9df1
SHA1 895052a42efa50043f473f072578bee69be8d2f8
SHA512 1578948dba2492263c0b174816451218c70df89e6b4440981db9513c664d97f6253fc1c0dab4164c620b9cb7794f4789677a0c38e0a5ac9636aee1dbc3d16062
SSDEEP 3072:0RcqYHq7Aiytzg2ScpvgJcLYsqYX6UDdyBo:K0Hq7AiyegZgJoZXBa
TLSH
T171C35B47B3E540BBD1B6C679CD234A56D3B678150B249BAF07A402162F233D18E3AF72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/Lib/Windows/VMProtectSDK64.lib

SHA256 9997a9c6e179010450385832a66ea36938e180fc9067d91fd6aae7c9f6bf4d18
MD5 6e597e4be8eb765dcfd4b058c463bb7b
SHA1 4eda19892928cf64c4e3e9a9e9e4c533ec70230f
SHA512 3895946dedbf25f5ab279370d3315ed93b5d09ec35789a2721f6b7b0717faf06d0d02659e682d592113f77dd8fe70f4739952588b50c4124535968550aebcb99
SSDEEP 48:lZ5/k5RLRzRCRXB6cI15gXy/F/CRcRj15T1tRLRyIBrzX43KXyAOUMKnFS5vKas5:ljkqB61xr83KIKFGKaWdlmkArg
TLSH
T128E1763959E17D2FC6EAC1FA7B21DCA97E6D404101F7E46B308D4BA2432A65FA347207
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect.exe

IMPHASH c96cbfaa48f620ce16fd692d1cf01768
SHA256 138d140584e3d703c3592cc3cd15124b428daee75629e25710b65228103ff817
MD5 fe633bd52b85a6742aad8cfda32d1ae8
SHA1 011cbf13a6a2dd8d3607657848032e1d57170c4e
SHA512 6a0d90cd6c6b03cbf0a44894d3fb682a5c2a0e1cdbf1d507b291ea43dbaae15c4c9207f56439a5a9ae45e1cc88c809d6bb5db023adf27b3afa6480057109d80b
SSDEEP 786432:pKBjq16XQwb9lcVg1j3ir1PjJU8J19TiDU7oXf:pamAXQ89l8Y4Pt19TiP
TLSH
T1727723966C98475EC4C8C635D1091BFDE2D93CB94D76881B7FC62D022E3AD63CCE1A26
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Insecure Codesign Algorithm

File was codesigned using an insecure algorithm.

Digest

39:94:84:c8:f4:de:da:6b:a0:b3:7a:17:52:af:b8:bc:70:a6:d6:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d

Chains

Mar 20, 2026

CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d

Serial Number

07:25:df:15:2a:5b:89:92:f3:68:49:ae

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 23, 2023 - Jun 17, 2026

Minor OS version

2

Major OS version

5

Entry point

87219451

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

16.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

21.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

239KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

917KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.qtmetad

Size

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

Virtual Size

272B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.e)l

Size

Virtual Size

13.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.dJ+

Size

512B

Virtual Size

264B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.TTN

Size

31.3MB

Virtual Size

31.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

339KB

Virtual Size

338KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

164B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Project1.bpr

SHA256 c3996104d724e034d8cf54f1c75a82aaffa9442cbc8b749ec25ef28af65df241
MD5 2c70b31c14a2ced58825bc50f1d0de85
SHA1 4ce4ec8976ce1711af824fef829f271208e568f6
SHA512 2b5f95f040b498eca4d67ec101c7a023998d33db7b801e9ff93b1aecef89d97973e739e5d0744ee31b9d27cd3d151e2d37917e757d186a7e511cbad4f039557a
TLSH
T1A1812451E5FCCD02F1496C522602A5087E1E928B036059BE31D88CD81FBEDBB52776BF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Project1.cpp

SHA256 0f28dd680a28545b394f82a70262434acfbf4f9315891a30a93a1f3cddf83de1
MD5 48ea2959ab15c624fc5d8a0ec43a7feb
SHA1 f8212d054920642718908b98fdab06dd6cd862d7
SHA512 10773df25d9539488fb39fb8ccaa5c51333aa138232d522664b9145531ba01c0b38d87269ba2a1a0c3ddde0b365653b731c33b7165502d1b281477a90f605427
TLSH
T1DC11629EADA5489391A7E4FA13399140D17BD67F1FC54412B68C81149FC1128C94F397
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Project1.exe

IMPHASH 532c62395891b8320957c654d6524f07
SHA256 ad0876324839c5098ece43c8cd1f6ccca9bc1746045c167a8f4d3b4ce255e60a
MD5 c2343e61f464d18099f748d49ed292f6
SHA1 ba0614de2b0c3dff2f1a06096d7ae8a4bfa3c1c1
SHA512 0a795f34fc10d98c9a9a43c236d60c6dee2639ba646ac58c4f6a1055c704c5393435ee8df543c07216ba64c8ab39845f52c65723d419c8d254e6c552b882bef6
SSDEEP 6144:0s8xf99OJHuf9iJ3KutaCF1fdlCTEg4N5flQSMh:0NOJHoMKJCFVRQSM
TLSH
T13F244B32FA59CC3EE06245782B6D6A3294765930AA88D253F3E45F4CBDF61D0631A31F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8316

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

vcl190.bpl

@Vcl@Consts@initialization$qqrv @Vcl@Consts@Finalization$qqrv @Vcl@Graphics@initialization$qqrv @Vcl@Graphics@Finalization$qqrv @Vcl@Graphutil@initialization$qqrv @Vcl@Graphutil@Finalization$qqrv @Vcl@Toolwin@initialization$qqrv @Vcl@Toolwin@Finalization$qqrv @Vcl@Printers@initialization$qqrv @Vcl@Printers@Finalization$qqrv @Vcl@Stdactns@initialization$qqrv @Vcl@Stdactns@Finalization$qqrv @Vcl@Comstrs@initialization$qqrv @Vcl@Comstrs@Finalization$qqrv @Vcl@Extctrls@initialization$qqrv @Vcl@Extctrls@Finalization$qqrv @Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv @Vcl@Extctrls@TLinkLabel@$bcctr$qqrv @Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv @Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv @Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv @Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv @Vcl@Stdctrls@initialization$qqrv @Vcl@Stdctrls@Finalization$qqrv @Vcl@Stdctrls@TStaticText@$bcdtr$qqrv @Vcl@Stdctrls@TStaticText@$bcctr$qqrv @Vcl@Stdctrls@TListBox@$bcdtr$qqrv @Vcl@Stdctrls@TListBox@$bcctr$qqrv @Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv @Vcl@Stdctrls@TCheckBox@$bcctr$qqrv @Vcl@Stdctrls@TButton@$bcdtr$qqrv @Vcl@Stdctrls@TButton@$bcctr$qqrv @Vcl@Stdctrls@TComboBox@$bcdtr$qqrv @Vcl@Stdctrls@TComboBox@$bcctr$qqrv @Vcl@Stdctrls@TMemo@$bcdtr$qqrv @Vcl@Stdctrls@TMemo@$bcctr$qqrv @Vcl@Stdctrls@TEdit@$bcdtr$qqrv @Vcl@Stdctrls@TEdit@$bcctr$qqrv @Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv @Vcl@Stdctrls@TGroupBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv @Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv @Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv @Vcl@Stdctrls@TScrollBar@$bcctr$qqrv @Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv @Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv @Vcl@Stdctrls@TRadioButton@$bcctr$qqrv @Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv @Vcl@Stdctrls@TCustomButton@$bcctr$qqrv @Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv @Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv @Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv @Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv @Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv @Vcl@Stdctrls@TButton@ @Vcl@Stdctrls@TEdit@ @Vcl@Stdctrls@TLabel@ @Vcl@Listactns@initialization$qqrv @Vcl@Listactns@Finalization$qqrv @Vcl@Comctrls@initialization$qqrv @Vcl@Comctrls@Finalization$qqrv @Vcl@Comctrls@THeaderControl@$bcdtr$qqrv @Vcl@Comctrls@THeaderControl@$bcctr$qqrv @Vcl@Comctrls@TStatusBar@$bcdtr$qqrv @Vcl@Comctrls@TStatusBar@$bcctr$qqrv @Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv @Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv @Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv @Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv @Vcl@Comctrls@TPageScroller@$bcdtr$qqrv @Vcl@Comctrls@TPageScroller@$bcctr$qqrv @Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv @Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv @Vcl@Comctrls@TCoolBar@$bcdtr$qqrv @Vcl@Comctrls@TCoolBar@$bcctr$qqrv @Vcl@Comctrls@TToolBar@$bcdtr$qqrv @Vcl@Comctrls@TToolBar@$bcctr$qqrv @Vcl@Comctrls@TListView@$bcdtr$qqrv @Vcl@Comctrls@TListView@$bcctr$qqrv @Vcl@Comctrls@TCustomListView@$bcdtr$qqrv @Vcl@Comctrls@TCustomListView@$bcctr$qqrv @Vcl@Comctrls@THotKey@$bcdtr$qqrv @Vcl@Comctrls@THotKey@$bcctr$qqrv @Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv @Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv @Vcl@Comctrls@TUpDown@$bcdtr$qqrv @Vcl@Comctrls@TUpDown@$bcctr$qqrv @Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv @Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv @Vcl@Comctrls@TRichEdit@$bcdtr$qqrv @Vcl@Comctrls@TRichEdit@$bcctr$qqrv @Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv @Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv @Vcl@Comctrls@TProgressBar@$bcdtr$qqrv @Vcl@Comctrls@TProgressBar@$bcctr$qqrv @Vcl@Comctrls@TTrackBar@$bcdtr$qqrv @Vcl@Comctrls@TTrackBar@$bcctr$qqrv @Vcl@Comctrls@TTreeView@$bcdtr$qqrv @Vcl@Comctrls@TTreeView@$bcctr$qqrv @Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv @Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv @Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv @Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv @Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv @Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv @Vcl@Comctrls@TTabControl@$bcdtr$qqrv @Vcl@Comctrls@TTabControl@$bcctr$qqrv @Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv @Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv @Vcl@Dialogs@initialization$qqrv @Vcl@Dialogs@Finalization$qqrv @Vcl@Dialogs@MessageDlg$qqrx20System@UnicodeString26System@Uitypes@TMsgDlgType54System@%Set$t25System@Uitypes@TMsgDlgBtn$iuc$0$iuc$11%i @Vcl@Menus@initialization$qqrv @Vcl@Menus@Finalization$qqrv @Vcl@Imglist@initialization$qqrv @Vcl@Imglist@Finalization$qqrv @Vcl@Actnlist@initialization$qqrv @Vcl@Actnlist@Finalization$qqrv @Vcl@Controls@initialization$qqrv @Vcl@Controls@Finalization$qqrv @Vcl@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp21Vcl@Controls@TControlr19System@Types@TPoint @Vcl@Controls@TWinControl@UpdateTIPStatus$qqrv @Vcl@Controls@TWinControl@DockReplaceDockClient$qqrp21Vcl@Controls@TControlp24Vcl@Controls@TWinControlt119Vcl@Controls@TAlignt1 @Vcl@Controls@TWinControl@SetParentBackground$qqro @Vcl@Controls@TWinControl@CanAutoSize$qqrrit1 @Vcl@Controls@TWinControl@AssignTo$qqrp26System@Classes@TPersistent @Vcl@Controls@TWinControl@UpdateStyleElements$qqrv @Vcl@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1 @Vcl@Controls@TWinControl@CanResize$qqrrit1 @Vcl@Controls@TWinControl@GetClientOrigin$qqrv @Vcl@Controls@TWinControl@GetControlExtents$qqrv @Vcl@Controls@TWinControl@Repaint$qqrv @Vcl@Controls@TWinControl@Update$qqrv @Vcl@Controls@TWinControl@Invalidate$qqrv @Vcl@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__ @Vcl@Controls@TWinControl@ShowControl$qqrp21Vcl@Controls@TControl @Vcl@Controls@TWinControl@SetBounds$qqriiii @Vcl@Controls@TWinControl@SetParentDoubleBuffered$qqro @Vcl@Controls@TWinControl@CustomAlignPosition$qqrp21Vcl@Controls@TControlrit2t2t2r18System@Types@TRectrx23Vcl@Controls@TAlignInfo @Vcl@Controls@TWinControl@CustomAlignInsertBefore$qqrp21Vcl@Controls@TControlt1 @Vcl@Controls@TWinControl@CreateHandle$qqrv @Vcl@Controls@TWinControl@DestroyWnd$qqrv @Vcl@Controls@TWinControl@$bdtr$qqrv @Vcl@Controls@TControl@InitiateAction$qqrv @Vcl@Controls@TControl@GetFloatingDockSiteClass$qqrv @Vcl@Controls@TControl@CreateTouchManager$qqrv @Vcl@Controls@TControl@SetBiDiMode$qqr24System@Classes@TBiDiMode @Vcl@Controls@TControl@GetText$qqrv @Vcl@Controls@TControl@SetEnabled$qqro @Vcl@Controls@TControl@SetName$qqrx20System@UnicodeString @Vcl@Controls@TControl@SetAutoSize$qqro @Vcl@Controls@TControl@SetDragMode$qqr24System@Uitypes@TDragMode @Vcl@Controls@TControl@GetAction$qqrv @Vcl@Controls@TControl@GetEnabled$qqrv @Vcl@Controls@TControl@GetDragImages$qqrv @Vcl@Controls@TControl@$bdtr$qqrv @Vcl@Themes@initialization$qqrv @Vcl@Themes@Finalization$qqrv @Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv @Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv @Vcl@Forms@initialization$qqrv @Vcl@Forms@Finalization$qqrv @Vcl@Forms@TApplication@ShowException$qqrp25System@Sysutils@Exception @Vcl@Forms@TApplication@Run$qqrv @Vcl@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv @Vcl@Forms@TApplication@Initialize$qqrv @Vcl@Forms@TForm@$bcdtr$qqrv @Vcl@Forms@TForm@$bcctr$qqrv @Vcl@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv @Vcl@Forms@TCustomForm@RequestAlign$qqrv @Vcl@Forms@TCustomForm@UpdateActions$qqrv @Vcl@Forms@TCustomForm@ShowModal$qqrv @Vcl@Forms@TCustomForm@SetFocus$qqrv @Vcl@Forms@TCustomForm@CloseQuery$qqrv @Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState @Vcl@Forms@TCustomForm@PaintWindow$qqrp5HDC__ @Vcl@Forms@TCustomForm@SetFocusedControl$qqrp24Vcl@Controls@TWinControl @Vcl@Forms@TCustomForm@DefaultHandler$qqrpv @Vcl@Forms@TCustomForm@DestroyWindowHandle$qqrv @Vcl@Forms@TCustomForm@DestroyHandle$qqrv @Vcl@Forms@TCustomForm@CreateWindowHandle$qqrrx26Vcl@Controls@TCreateParams @Vcl@Forms@TCustomForm@CreateWnd$qqrv @Vcl@Forms@TCustomForm@CreateParams$qqrr26Vcl@Controls@TCreateParams @Vcl@Forms@TCustomForm@AlignControls$qqrp21Vcl@Controls@TControlr18System@Types@TRect @Vcl@Forms@TCustomForm@ClientWndProc$qqrr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@WndProc$qqrr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2 @Vcl@Forms@TCustomForm@SetParent$qqrp24Vcl@Controls@TWinControl @Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@SetParentBiDiMode$qqro @Vcl@Forms@TCustomForm@GetFloating$qqrv @Vcl@Forms@TCustomForm@GetClientRect$qqrv @Vcl@Forms@TCustomForm@DefineProperties$qqrp21System@Classes@TFiler @Vcl@Forms@TCustomForm@ReadState$qqrp22System@Classes@TReader @Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation @Vcl@Forms@TCustomForm@Loaded$qqrv @Vcl@Forms@TCustomForm@DoDestroy$qqrv @Vcl@Forms@TCustomForm@DoCreate$qqrv @Vcl@Forms@TCustomForm@$bdtr$qqrv @Vcl@Forms@TCustomForm@BeforeDestruction$qqrv @Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponenti @Vcl@Forms@TCustomForm@AfterConstruction$qqrv @Vcl@Forms@TCustomForm@$bcdtr$qqrv @Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponent @Vcl@Forms@TCustomForm@$bcctr$qqrv @Vcl@Forms@TScrollBox@$bcdtr$qqrv @Vcl@Forms@TScrollBox@$bcctr$qqrv @Vcl@Forms@TScrollingWinControl@AdjustClientRect$qqrr18System@Types@TRect @Vcl@Forms@TScrollingWinControl@AutoScrollInView$qqrp21Vcl@Controls@TControl @Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4% @Vcl@Forms@TScrollingWinControl@DoGesture$qqrrx30Vcl@Controls@TGestureEventInforo @Vcl@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv @Vcl@Forms@TScrollingWinControl@$bdtr$qqrv @Vcl@Forms@Application @$xp$15Vcl@Forms@TForm @Vcl@Forms@TForm@ @Vcl@Clipbrd@initialization$qqrv @Vcl@Clipbrd@Finalization$qqrv @Vcl@Mask@initialization$qqrv @Vcl@Mask@Finalization$qqrv @Vcl@Grids@initialization$qqrv @Vcl@Grids@Finalization$qqrv @Vcl@Grids@TDrawGrid@$bcdtr$qqrv @Vcl@Grids@TDrawGrid@$bcctr$qqrv @Vcl@Grids@TStringGrid@$bcdtr$qqrv @Vcl@Grids@TStringGrid@$bcctr$qqrv @Vcl@Grids@TCustomDrawGrid@$bcdtr$qqrv @Vcl@Grids@TCustomDrawGrid@$bcctr$qqrv @Vcl@Grids@TCustomGrid@$bcdtr$qqrv @Vcl@Grids@TCustomGrid@$bcctr$qqrv @Vcl@Buttons@initialization$qqrv @Vcl@Buttons@Finalization$qqrv @Vcl@Buttons@TBitBtn@$bcdtr$qqrv @Vcl@Buttons@TBitBtn@$bcctr$qqrv @Vcl@Categorybuttons@initialization$qqrv @Vcl@Categorybuttons@Finalization$qqrv @Vcl@Categorybuttons@TCategoryButtons@$bcdtr$qqrv @Vcl@Categorybuttons@TCategoryButtons@$bcctr$qqrv @Vcl@Buttongroup@initialization$qqrv @Vcl@Buttongroup@Finalization$qqrv @Vcl@Buttongroup@TButtonGroup@$bcdtr$qqrv @Vcl@Buttongroup@TButtonGroup@$bcctr$qqrv @Vcl@Styles@initialization$qqrv @Vcl@Styles@Finalization$qqrv @Vcl@Styles@TStyleEngine@$bcdtr$qqrv @Vcl@Styles@TStyleEngine@$bcctr$qqrv

rtl190.bpl

@System@initialization$qqrv @System@Finalization$qqrv @System@UTF8ToUnicodeString$qqrpxc @System@FreeMemory$qpv @System@@CheckAutoResult$qqrl @System@UnregisterModule$qqrp17System@TLibModule @System@RegisterModule$qqrp17System@TLibModule @System@FindHInstance$qqrpv @System@@DynArrayRelease$qqrpv @System@@DynArrayAddRef$qqrpv @System@SetAnsiString$qqrp27System@%AnsiStringT$us$i0$%pbius @System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$% @System@@UStrFromPChar$qqrr20System@UnicodeStringpc @System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$% @System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus @System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius @System@@LStrInsert$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%i @System@@LStrDelete$qqrr27System@%AnsiStringT$us$i0$%ii @System@@LStrCmp$qqrv @System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2 @System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$% @System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus @System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius @System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus @System@@LStrFromWChar$qqrr27System@%AnsiStringT$us$i0$%bus @System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$% @System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString @System@@LStrFromPWCharLen$qqrr27System@%AnsiStringT$us$i0$%pbius @System@@LStrClr$qqrpv @System@@UStrClr$qqrpv @System@@HandleFinally$qqrv @System@TObject@MethodName$qqrpv @System@TObject@MethodAddress$qqrx20System@UnicodeString @System@TObject@MethodAddress$qqrrx28System@%SmallString$iuc$255% @System@TObject@Dispatch$qqrpv @System@TObject@ToString$qqrv @System@TObject@ClassInfo$qqrv @System@TObject@InheritsFrom$qqrp17System@TMetaClass @System@@FindDynaInst$qqrxp14System@TObjects @System@TObject@UnitScope$qqrv @System@TObject@UnitName$qqrv @System@TObject@GetInterfaceTable$qqrv @System@TObject@GetInterfaceEntry$qqrrx5_GUID @System@TObject@GetHashCode$qqrv @System@TObject@Equals$qqrp14System@TObject @System@TObject@InitInstance$qqrpv @System@TObject@$bdtr$qqrv @System@TObject@InstanceSize$qqrv @System@TObject@FreeInstance$qqrv @System@TObject@NewInstance$qqrv @System@TObject@ClassParent$qqrv @System@TObject@ClassNameIs$qqrx20System@UnicodeString @System@TObject@QualifiedClassName$qqrv @System@TObject@ClassName$qqrv @System@Set8087CW$qqrus @System@Reset8087CW$qqrv @System@SetRaiseList$qqrpv @System@RaiseList$qqrv @System@IsMemoryManagerSet$qqrv @System@SetMemoryManager$qqrrx23System@TMemoryManagerEx @System@GetMemoryManager$qqrr23System@TMemoryManagerEx @System@DefaultSystemCodePage @System@IsMultiThread @System@IsConsole @System@ExitProc @System@CmdLine @System@IsLibrary @System@MainInstance @System@ExceptionAcquired @System@RaiseExceptObjProc @System@ExceptObjProc @System@Types@initialization$qqrv @System@Types@Finalization$qqrv @System@Uitypes@initialization$qqrv @System@Uitypes@Finalization$qqrv @System@Sysconst@initialization$qqrv @System@Sysconst@Finalization$qqrv @System@Internal@Excutils@initialization$qqrv @System@Internal@Excutils@Finalization$qqrv @System@Rtlconsts@initialization$qqrv @System@Rtlconsts@Finalization$qqrv @System@Character@initialization$qqrv @System@Character@Finalization$qqrv @Winapi@Shfolder@initialization$qqrv @Winapi@Shfolder@Finalization$qqrv @Winapi@Imagehlp@initialization$qqrv @Winapi@Imagehlp@Finalization$qqrv @System@Sysutils@initialization$qqrv @System@Sysutils@Finalization$qqrv @System@Sysutils@TOSVersion@$bcctr$qqrv @System@Sysutils@TEncoding@$bcdtr$qqrv @System@Sysutils@TLanguages@$bcdtr$qqrv @System@Sysutils@Exception@$bcdtr$qqrv @System@Sysutils@Exception@$bcctr$qqrv @System@Sysutils@Exception@$bdtr$qqrv @System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString @System@Sysutils@StrToIntDef$qqrx20System@UnicodeStringi @System@Sysutils@TOSVersion@$bcdtr$qqrv @System@Sysutils@TEncoding@$bcctr$qqrv @System@Sysutils@Exception@ @System@Sysutils@TLanguages@$bcctr$qqrv @System@Math@initialization$qqrv @System@Math@Finalization$qqrv @System@Timespan@initialization$qqrv @System@Timespan@Finalization$qqrv @System@Timespan@TTimeSpan@$bcctr$qqrv @System@Timespan@TTimeSpan@$bcdtr$qqrv @System@Varutils@initialization$qqrv @System@Varutils@Finalization$qqrv @System@Variants@initialization$qqrv @System@Variants@Finalization$qqrv @System@Strutils@initialization$qqrv @System@Strutils@Finalization$qqrv @System@Ansistrings@initialization$qqrv @System@Ansistrings@Finalization$qqrv @System@Rtti@initialization$qqrv @System@Rtti@Finalization$qqrv @System@Typinfo@initialization$qqrv @System@Typinfo@Finalization$qqrv @System@Generics@Defaults@initialization$qqrv @System@Generics@Defaults@Finalization$qqrv @System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv @System@Generics@Defaults@TStringComparer@$bcdtr$qqrv @System@Generics@Defaults@TIStringComparer@$bcctr$qqrv @System@Generics@Defaults@TStringComparer@$bcctr$qqrv @System@Diagnostics@initialization$qqrv @System@Diagnostics@Finalization$qqrv @System@Syncobjs@initialization$qqrv @System@Syncobjs@Finalization$qqrv @System@Syncobjs@TInterlocked@Increment$qqrri @System@Generics@Collections@initialization$qqrv @System@Generics@Collections@Finalization$qqrv @System@Classes@initialization$qqrv @System@Classes@Finalization$qqrv @System@Classes@TObserverMapping@$bcdtr$qqrv @System@Classes@TLoginCredentialService@$bcdtr$qqrv @System@Classes@TLoginCredentialService@$bcctr$qqrv @System@Classes@TBinaryWriter@$bcdtr$qqrv @System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2 @System@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv @System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver% @System@Classes@TComponent@CanObserve$qqrxi @System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction @System@Classes@TComponent@GetObservers$qqrv @System@Classes@TComponent@$bcctr$qqrv @System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter @System@Classes@TComponent@$bdtr$qqrv @System@Classes@TThread@$bcdtr$qqrv @System@Classes@TThread@$bcctr$qqrv @System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent @System@Classes@TPersistent@$bdtr$qqrv @System@Classes@TBinaryWriter@$bcctr$qqrv @System@Classes@TComponent@$bcdtr$qqrv @System@Classes@TObserverMapping@$bcctr$qqrv @System@Uiconsts@initialization$qqrv @System@Uiconsts@Finalization$qqrv @System@Actions@initialization$qqrv @System@Actions@Finalization$qqrv @System@Win@Comconst@initialization$qqrv @System@Win@Comconst@Finalization$qqrv @System@Win@Comobj@initialization$qqrv @System@Win@Comobj@Finalization$qqrv @System@Win@Comobj@TComServerObject@$bcctr$qqrv @System@Win@Comobj@TComServerObject@$bcdtr$qqrv @System@Contnrs@initialization$qqrv @System@Contnrs@Finalization$qqrv @System@Dateutils@initialization$qqrv @System@Dateutils@Finalization$qqrv @System@Dateutils@TTimeZone@$bcdtr$qqrv @System@Dateutils@TTimeZone@$bcctr$qqrv @System@Masks@initialization$qqrv @System@Masks@Finalization$qqrv @System@Ioutils@initialization$qqrv @System@Ioutils@Finalization$qqrv @System@Ioutils@TPath@$bcctr$qqrv @System@Ioutils@TPath@$bcdtr$qqrv @System@Inifiles@initialization$qqrv @System@Inifiles@Finalization$qqrv @System@Win@Registry@initialization$qqrv @System@Win@Registry@Finalization$qqrv @System@Win@Registry@TRegistry@$bcctr$qqrv @System@Win@Registry@TRegistry@$bcdtr$qqrv @System@Maskutils@initialization$qqrv @System@Maskutils@Finalization$qqrv @System@Helpintfs@initialization$qqrv @System@Helpintfs@Finalization$qqrv @Winapi@Msxmlintf@initialization$qqrv @Winapi@Msxmlintf@Finalization$qqrv @Winapi@Uxtheme@initialization$qqrv @Winapi@Uxtheme@Finalization$qqrv @Winapi@Flatsb@initialization$qqrv @Winapi@Flatsb@Finalization$qqrv @Winapi@Multimon@initialization$qqrv @Winapi@Multimon@Finalization$qqrv @System@Widestrutils@initialization$qqrv @System@Widestrutils@Finalization$qqrv @System@Zlib@initialization$qqrv @System@Zlib@Finalization$qqrv @Winapi@Wincodec@initialization$qqrv @Winapi@Wincodec@Finalization$qqrv

kernel32

CloseHandle CreateFileA DeleteCriticalSection DeleteFileA EnterCriticalSection ExitProcess FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetCurrentThreadId GetEnvironmentStrings GetFileAttributesA GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeA GetStringTypeW GetSystemDefaultLangID GetUserDefaultLCID GetVersion GetVersionExA GetVersionExW HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedExchange InterlockedIncrement IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale LCMapStringA LeaveCriticalSection LoadLibraryA LocalAlloc LocalFree MultiByteToWideChar RaiseException ReadFile RtlUnwind SetConsoleCtrlHandler SetFilePointer SetHandleCount SetLastError SetThreadLocale Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue VirtualQuery WideCharToMultiByte WriteFile

user32

EnumThreadWindows MessageBoxA wsprintfA

vmprotectsdk32

VMProtectBegin VMProtectDecryptStringA VMProtectEnd

Name

.text

Size

153KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

23KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

28KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Project1.exe.vmp

SHA256 617b5101a17ab300d77bb15c34182879ee2ee1cd1341a9a19c12dbe53cc47736
MD5 eb7d9181b30a74c032a6f02596732c18
SHA1 c269b41c403e2dbff9ec6bec563ed130c76930e1
SHA512 0895882ca49ad318087ce4d7b7c819235360a330b59a810c557cd740809f1f9872b3d3238a2a08959c538dc2fd442c8171785e307c0a73efa8af428e791b9fe7
TLSH
T187018910A22E7F18412B019327E58DA134F7F344416A064599EA48A5FF64D048AA73FF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Project1.res

SHA256 d979175c5d319a18b6869aab66e7f036702c3b12ae261caeffb5781c51092f50
MD5 04b3152f3bbd6f31b02a6d5c33888108
SHA1 c5f4faa609c5ba129157e25a9abf4d096a46c574
SHA512 daa0bc4fc6a0ad9b65b94a629cc9c54df74874af7956a20077fdb666eff4edfcca04f9ec03c557dc1f47e03620ad078d5c418a716324b8a1cb50515f93d9d886
TLSH
T1EF116D1AB324E869F511D23E9507439B486BDC708B198ACB75623EEE2D317C04DB62D8
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Unit1.cpp

SHA256 797a037641eda208de088666c940ee026c00ed334ac6c4fb2de4a73ed7fcd32b
MD5 c7a9846be2f668332d069ec9d21421fd
SHA1 2a97950587477ab7b2f5f087816e417525b24359
SHA512 9589a481c6cb167579139d8d99a91eaad556d3b133abfd945130501c250f9e34e95b798c7c75a65a216dd6628087b2e24b689a28aa55ed2a4af4e4f0d0db5ba3
TLSH
T1AC1170186E1D14034270F1FC2B16CC78EB6C40706B77D832A15F55C55B984599B5F743
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Unit1.dfm

SHA256 cb0ae2e4ac1db77df8855b817e4421e3c6103ab07fe2c3222fa8a1e070958ef1
MD5 7a2ed8726e949923ece9338e9ffddaf9
SHA1 9f1b6fc43a64ad18fef84a81639744477eab60a7
SHA512 4da7c50b7eae7cfd0da6cb1aff3aa63b7301797b645b32fae8da8bc6e6d776c5115e7f232f9ab3aa26fd1b0ff4d1a660df166bab5a3b94f59e79baebe9eda7cb
TLSH
T1AA0188B8962993201963D5328513094D6C26B9630143A8257BD7C8DDAFD2D06A7F1296
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/Unit1.h

SHA256 b7388c434dfe1e78141254f5141ba4d689ffff64c5c6b1dc53a1599fb26d794b
MD5 02db91662eb945312f2e461dec4a303f
SHA1 f8de42ceb004b5b6c80325919187944ce0d5fd53
SHA512 718b203545278734d8b4dfb75c5c10d6e7c4cb9d671036cd384d041089550355b2c309f9992124eea2efadb23890b74cb499b3a5e591f810deecdd90f9e37d27
TLSH
T1DE11E9645F6D049AD076F236D3039412E7DA9575A762A82534BF94954F81240238F346
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/BCB/VMProtectSDK32.lib

SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
TLSH
T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/Project1.dof

SHA256 f52614cf541549774a1b528928f89ad86a9467d0c1df69c03ec807948c4df1b1
MD5 7d82d02ac66111abd28e82c13c0ae9d2
SHA1 f7383ac8bb96d54712c5d561fa5939915b30b727
SHA512 237b413d0d0fd625aaf9c31952b18aa8645466b40afbc2c340680425ed8cf774787e8a671d435d12ed397d5833c7cd69820ea41bbef2c125c6f2de7f7b6228af
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/Project1.dpr

SHA256 ba8817642a3029a3f06f2828c5392292f28374d64441c0e7a371de0f3055f502
MD5 2f65c01ebdb111351f1b67c0565dbf51
SHA1 30fe8c1582d9919394bb9c0952dcdefa6e046f02
SHA512 7cd37369e9fcee4c55ba91e2e399ea931080fa549020c146c5e4861dd5bf1c326cc77fdb5ebefa3745cb52563ffc3716bb4ef5b1d43ab75e842bff52def4bb19
TLSH
T146C080CB27DD41C3A7DB71FB18074581B473C53C0C9073543525E055584D756DB23361
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/Project1.exe

IMPHASH 1e7575186edecf060e4585f8bc74203f
SHA256 a14c1e75ce36821ecd80e4525c888c9d58e80a23a8a5f6ebe9923f6a33d93e7d
MD5 fcdd67939f856f8bcfc404bb5f706ec7
SHA1 758d14e6d838e12d2c1e52f65594a91dbe744f4b
SHA512 18be594c08513e005840d9af00174edb021fda635e5331528310f72fcfce20938edef99965ccf0039ec0283500239642bb6ff6809ef797c79f6c4c5ba1a6aff2
SSDEEP 24576:FiRfWQHP2VPwHgzDe/EMdwBmSPk96vBL/5YSnrnS:AWHPISVZ9YSrnS
TLSH
T151156C13B392173FC136163AC96792A05C3B7A102E965856DFF4CD8C1FF92A12C3AA57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

769096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW RegCloseKey

user32

LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetClassLongW SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CreateAcceleratorTableW CopyIcon CloseClipboard ClientToScreen CheckMenuItem CharUpperBuffW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrcpyW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc TryEnterCriticalSection SwitchToThread SuspendThread SizeofResource SignalObjectAndWait SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile RaiseException IsDebuggerPresent MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryW LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTickCount GetThreadPriority GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateThread CreateFileW CreateEventW CompareStringW CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW Chord BitBlt Arc AbortDoc

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CoCreateInstance IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

vmprotectsdk32

VMProtectDecryptStringA VMProtectEnd VMProtectBegin

Name

.text

Size

741KB

Virtual Size

741KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/Project1.exe.vmp

SHA256 617b5101a17ab300d77bb15c34182879ee2ee1cd1341a9a19c12dbe53cc47736
MD5 eb7d9181b30a74c032a6f02596732c18
SHA1 c269b41c403e2dbff9ec6bec563ed130c76930e1
SHA512 0895882ca49ad318087ce4d7b7c819235360a330b59a810c557cd740809f1f9872b3d3238a2a08959c538dc2fd442c8171785e307c0a73efa8af428e791b9fe7
TLSH
T187018910A22E7F18412B019327E58DA134F7F344416A064599EA48A5FF64D048AA73FF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/Project1.res

SHA256 649865f23f2dad52f1426f68a62cd6325e1d6956d2a24e94e7955d35c9c0494b
MD5 0449e63e988a4abab210048b5717d71c
SHA1 42c36a7f1e04bb4c55bc5e9483e9fde64cffbbff
SHA512 f7be79e58b20c661021ef715b7d96fcd5b064ef9ffe13992983765b507717bb6586efc40cf165fd885fe187b77a6cbdcdb82c17ccfa0d0cd1378eea5fc1dd7fa
TLSH
T1291181266384E198C00A43B0D4439EDC2171E869AD3CA9D7E8F2FEFF7E2451535039B4
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/Unit1.dfm

SHA256 f471a0d93d4706fa4eb6fae27b32a9f2d9ac5d14b8683c2cce15c0a9712e5821
MD5 1dbb9c17b0e319cbff8391baf2b11877
SHA1 e6f3ecb6381e02b3ffb80e72c9a839f0b4749efa
SHA512 3dba59d75cb33c2896852dc7989ad36a926cc4b85433045f485e654987b5b4a57b902274f7bbe44acefe3368cde4e25a828ffab7d6ff90a2c3dbfb1eb7cc66bb
TLSH
T18201A6BC9628A32019A3D52384230D4D6C26B9730003B8257BD7CCDDAFD2D06ABF2286
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/Unit1.pas

SHA256 ae716ef107c41f16d4e31e0c7baed620ff9049ba758d3c88e0612db8a2803d74
MD5 590da536066ddef7d87e29c376d59f3d
SHA1 3056dd60a9b34ffdf9036ca5f542c93aae719084
SHA512 7a47004a15d896accd89ce193057409293d978c47bbc0d2e049ab5c91b636ec6de8fc20187064021333deeb01137469855367511a290e4a4f1e5d455bd91a95e
TLSH
T1160120901F5B361D154390E932170C43DEA9802517BCEC9160ABB6C20FC980AA7667AB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Delphi/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/Project1

SHA256 d1951f724d2aa423bb2c29eae92069b676b33a7d0e9d371a45e1d942c4a28a8d
MD5 0f748d65e665cb249408a25694f1c016
SHA1 c31e8b9ef31986ccc0ea19abf337d3fe7b82f479
SHA512 2da9405d516aee9a9bdd8372013ad4b1dbc4f7b031703673b684e97194f4a1e1c5afa1c2bb84e5c339f839dd4ad71caaa60604742908d1ae74f729f1b5d5736b
SSDEEP 6144:oRy5S3+kZrUHMNsP96a2FAtzojOGV2Spqjj/Ig7t/H9WIBR8PEZIPCJRK:oRy5S9ZrUHMNY9sFAtcaG8jV5/RBR8PP
TLSH
T1FC743919FE43917FCA2340F982774A5A9B319135203096A7B7D8DE3DBE79D82B42CB05
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x86

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/Project1.exe

IMPHASH 31c9cdd1525221040f7f273b9a6216ed
SHA256 afda096738c0646e01a2b3d2c000fe48b80376ce8464be660764ed2004ba5de3
MD5 e524da8fbf47a18fbae7ba94943eb451
SHA1 3aae8e31b4f7f14cd607b48291546d1a3233aff2
SHA512 c0641d9f1a1778095bfbd6463bc35caeaa3d3bb7cc4350d3853b40c7d72ef13e969ec4627319e25d05bf22cc83443010b45153721118261ba2b3c12634e078f4
SSDEEP 768:aivdTUc6NCnV/mfVKo6fuTy005j5y29zwB8p5UzNve9a+ZxeN/X3GRsYjY2zgy0p:JnwfH0uGV5MNy0l/vv
TLSH
T105734D92FBC187BDCA465EB54B06C1A7A720F2313C35C16B72D80B2F96FA0D2557A781
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

64128

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

vmprotectsdk32

VMProtectBegin VMProtectDecryptStringA VMProtectEnd

kernel32

CloseHandle CompareStringA CompareStringW CreateEventA CreateFileA CreateThread DeleteCriticalSection EnterCriticalSection EnumCalendarInfoA EnumResourceLanguagesA EnumResourceNamesA EnumResourceTypesA ExitProcess ExitThread FindResourceA FindResourceExA FormatMessageA FreeLibrary FreeResource GetCommandLineA GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetThreadLocale GetThreadPriority GetUserDefaultLCID GetVersionExA GetWindowsDirectoryA HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadResource LocalAlloc LocalFree LockResource MultiByteToWideChar ReadFile ReadProcessMemory ResetEvent ResumeThread SetEvent SetFilePointer SetLastError SetThreadLocale SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SuspendThread TerminateThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection WaitForSingleObject WideCharToMultiByte WriteFile

oleaut32

SysAllocStringLen SysFreeString SysReAllocStringLen

user32

CharLowerA CharLowerBuffA CharLowerBuffW CharUpperA CharUpperBuffA CharUpperBuffW DialogBoxParamA EndDialog GetDlgItem GetDlgItemTextA GetSystemMetrics MessageBeep MessageBoxA SetFocus

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/Project1.pas

SHA256 bfaa75a6c2d5801837c2ff245ba44af0fd9f407e7cbe8d07a24347cf1d3ff5e8
MD5 ac806e0bf103bc2e8120f7ef33a99567
SHA1 68b92cf412c3d8a7c73838a13f97d2f38677342a
SHA512 ac6a1888eb3d31f71d33f75d285419e1c0c171df2698e88c7f0db33dc77887657250b6e908affd34a150feebe4bfea3d75c6c8be20199fd02cf4d96b8332582d
TLSH
T1F131FE604E121E73C56184983BDFCC0696360103AB74E174B17EB2E51F48D85A6A0FDE
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/Resource.rc

SHA256 c8ea704bc97d465fa6761fd5358a852a57e37467bf5bb0299616a89777aaec27
MD5 0a3dac83ad2261f74be6dd492dd2dbb9
SHA1 94cef9538ee0c9069a7d0774d758bfd8533284e2
SHA512 726393b46db0073bbf053627274420ac6b862bc4dbf53d4a9719be1af816e1df67df5c44d0d13573b103a3d71b65a00c7304132313b12c6b994ca4a2207e2573
TLSH
T1EBE07D1193013D141580F29455795CD374D8E4B30F785B06B3FC011957968C486B4133
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/Resource.res

SHA256 d07d83ad978cc0ed6a882d46d7be6093b5333c4243dda78e2c08aa156cd987bc
MD5 eda0430286b41b50ae8c55b2971a8873
SHA1 2a2b8ad34e4ff7f26240c851a53bb08e1954f139
SHA512 6c892b63e0c31dad601707e4f52bb3263594f855e669f4b99857d77dd0a903aefd41c1a63f48d9fbcf0bb77e48361cbccd8554f893a4666ff0cc71a45080e8da
TLSH
T176E02EA093B0C000D4738E788E72ABA23C6238010F30820A2620374F9032A44EA39300
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/makeit.bat

SHA256 4496c2f32d1020e250e14ab70ec357b75bdbbfb08bc952ed83e52a26ec5b211e
MD5 7910995daa8681c13942e4ce17a6a656
SHA1 d392ac7efcc5f095ede7a1a581e3c6e8677e8e29
SHA512 7cd0d2b4841aef07d000d2c084b94fab06c62a59dd0c9d050bd5ab4d08ef49ad4c39b611487a8a0044d3a5bcb0b0adaece56679e507ce36cb58e6986b6b69fb5
TLSH
T1B7B012053D4C56C0FDCFCF5D883788405192736F8270837E1811D5582F01380047495B
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Free Pascal/makeit.sh

SHA256 1fb56c36d9d46a8cdad55d79839b9ac59a86d15df518800208957afb8a51efe4
MD5 49f4fda335793090271c10668c2da780
SHA1 e851f9b0d4bf6bbc5a8269cbe6d99938fbc271b7
SHA512 29e5ef7618375c8284ca217642b9ede6d57a273882fcacefa39104603778124512ee8e82220326db5fb00ae614f07ed20549bbaca9019d271dfde28172d11243
TLSH
T147A002442B88BB017BDEA710D156DE64F257355C6F228D7C10C9D29D24133819056597
MD5 SHA1 SHA512 TLSH

linux

VMProtect Lite 3.10.4/VMProtect/Code Markers/GCC/Project1

SHA256 6bd7626d74b11df5a7b7b49b1a7a08ebe6f21b870c4493d50d53eba8036b879e
MD5 d9a7d8095dc2e48c9827a498debb9d9a
SHA1 ee7931c457468adb3cafd8f31b70753ff217174e
SHA512 2ec7468348f93c93a859bef5188e32377644c2fe411d5feea260f9c44590545935c1728e263bc1c06a2ed8457951bb03f1d7e3a40103d73be0585b3437f94b68
SSDEEP 48:xH35L/ifdnpgS4zgFjf1j7hQvTc1IkjaFET:xH3M0kFjff1njaq
TLSH
T16B02CE42A79C0A26D01CC778C0DA4FC6B261F5510EA69B0B1681D21C1F5B78E6975F4F
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64

VMProtect Lite 3.10.4/VMProtect/Code Markers/GCC/Project1.cpp

SHA256 a2a798d15646b564f150c8622763deaa07847e24c50572b9532f9e63d33e1966
MD5 28365432294d8eb58809611429c025cf
SHA1 70e4a0b8d541366c28a1d666e0e652d634b93377
SHA512 b16b8b16ea547027b9aaede3d5ee4a95a88a84c12ff7ed41f94fe40c2c1acec7dd298cd7f988aee3fe67305f11f426e64bd1a26ba58abec857a984cc9585748d
TLSH
T1EAE0A314565D305BD193C1D42326CC3C224CC0132378D5B36E1721C03F55C5E965E247
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/GCC/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/GCC/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect Lite 3.10.4/VMProtect/Code Markers/GCC/makeit.sh

SHA256 8e19ce0f8d045ca709ac029631bd913c02ad5b3e95d9d792cd6d18a88eb4a0d2
MD5 f6a42f92cb10385709844a3cc9a03e65
SHA1 c3f626c5252457fcfffa93d82583a41bb9924a68
SHA512 7dfca41b6ed04b63219c73ae947867dc90c8935b8ae82018ba12275367644130ea4a07aa0c7b285fee0530554656dd43407f5c8a35a937897ae233a4470c6665
TLSH
T15BE02B241917837BB6DD9C8311204C70F78303E54EB0AEABD41AD455422D3470959D2A
MD5 SHA1 SHA512 TLSH

linux polyglot

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1

SHA256 ae0a22792b62dee33cc9328ff471b549b0967b33951cc385b43ad13c1582e0a6
MD5 4c4d34d37ff8ba71180424a7750ca87b
SHA1 34a841514f85db82f0ad2603a54811c115b1625d
SHA512 f7d41e00f34e87690e08c7e714ec35dd8dfa33cd2f4163638715686d24a2176c0ab816a3561b1d57baa2804e9e3e5dee50084689b179bae1f1597e5405eb66f3
SSDEEP 49152:MT1N0jDMi6MsYwdHunMk2zwRLK/yxpieGFvQUS3NCBvsGp+SJScZggFMnap+:ST0jD/6MsYwR8MkvLGyxFavlM
TLSH
T13A163C17B723C1ABCC331373855B26864A20D7157931AAAB72989DFC7F71E82782E705
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x86

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1.app/Contents/Info.plist

SHA256 9286ec9cdaf4f2000d9b64293c20c94145e2793794dd50695a8adae45fc8b8c0
MD5 c0666a4f507296683d58be1cde192132
SHA1 64d45a7233a501ef32995b0ca69ede4725ba3d1b
SHA512 6e6f8254bce59799c4aabaf02c5e2a42829d7cdcb09656b8a7cd472d82dc81e85f2b8bc1ea7bc15e9fa17fb258e9c3e9f7de5750be5ece27e43f8154f09196f2
TLSH
T1F421AFF481B8E51A9ACA1BA753D0114949D4F2CE9C7211F9F8CE7A448B1FA0613F3D51
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1.app/Contents/MacOS/project1

SHA256 ecffb08548891a701c817c04703ab8c0d2ff6e7b1f625ac52834894b171f8a3d
MD5 d2da6c635d1115b29ed099b4a0a187e9
SHA1 6d88950dd38478ba6777a292ee43569beecc8059
SHA512 36479460d1be7cd804389326be73fa916d2b299190a103fdb611af26b2f4c987841174b23e9e9cdb6487f5d7713b0a8cad7e7f82f9e7e460298ee115192dfbad
TLSH
T1341102B865246358BBC504656A1BDF88BF43CC66A201AE91343EC4792B4F5118B84096
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1.app/Contents/PkgInfo

SHA256 7e50a30efad50208a173203ced60818d693bb61266b75aa10927d1a2adce80cb
MD5 3eb019b2efc51cbae3c012fc5c512c95
SHA1 d4a27a59b839794485d90a6683225d8805977009
SHA512 d5491e628bd4bc004d628d840646339238cfe63e01ed1059d05cf3e7c6db808f740c2af2daabfde9f7984f414ebe5f446ff6aaba2ce2c79fcb30dee89a92b854
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1.exe

IMPHASH e78a5d103f3c1ceff54c4588d6a9ed5a
SHA256 864a8b0953fd38a64aa17123bf9e6aae62be534289dabe3a613959010485f44f
MD5 617d5d121653b7d87d30d32197e07a85
SHA1 b54a37291a8652043f6c3a817f724db2f1b19f64
SHA512 bb363dd86a438b431339440d006873896774a6eceb1ab7c5d3061951f00b354509680cf64b0c47d7b6acb731ab16d2016a0d37d8d215553d714e53a35c83d6ca
SSDEEP 49152:z7+3sUVt35XSsjXFxScIhTNKCbY072iWvQh:f+3sUVNXacIh4aV72iFh
TLSH
T198751C167722C11BCC632BF2874E468556A4E7643C30E9D731DC5EAEBB70B863E2A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1314096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

vmprotectsdk32

VMProtectBegin VMProtectDecryptStringA VMProtectEnd

comctl32

ImageList_Add ImageList_AddMasked ImageList_BeginDrag ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_DrawEx ImageList_DrawIndirect ImageList_EndDrag ImageList_GetImageCount ImageList_Remove ImageList_Replace ImageList_SetImageCount InitCommonControls

gdi32

Arc BitBlt Chord CombineRgn CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreateDIBitmap CreateEllipticRgn CreateFontIndirectA CreateFontIndirectW CreatePatternBrush CreatePen CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateSolidBrush DPtoLP DeleteDC DeleteObject Ellipse EnumFontFamiliesA EnumFontFamiliesExA EnumFontFamiliesExW ExcludeClipRect ExtCreatePen ExtCreateRegion ExtFloodFill ExtSelectClipRgn ExtTextOutA ExtTextOutW FillRgn GetBitmapBits GetBkColor GetCharABCWidthsA GetClipBox GetClipRgn GetCurrentObject GetDCOrgEx GetDIBits GetDeviceCaps GetMapMode GetObjectA GetObjectType GetObjectW GetPixel GetROP2 GetRandomRgn GetRgnBox GetStockObject GetTextAlign GetTextColor GetTextExtentExPointA GetTextExtentExPointW GetTextExtentPoint32A GetTextExtentPoint32W GetTextExtentPointA GetTextMetricsA GetViewportExtEx GetViewportOrgEx GetWindowExtEx GetWindowOrgEx IntersectClipRect LPtoDP LineTo MaskBlt MoveToEx OffsetRgn OffsetViewportOrgEx PatBlt Pie PolyBezier Polygon Polyline PtInRegion RealizePalette RectVisible Rectangle RestoreDC RoundRect SaveDC SelectClipRgn SelectObject SelectPalette SetArcDirection SetBkColor SetBkMode SetBrushOrgEx SetMapMode SetPixel SetPolyFillMode SetROP2 SetStretchBltMode SetTextAlign SetTextCharacterExtra SetTextColor SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetWindowOrgEx StretchBlt TextOutW

kernel32

CloseHandle CompareStringA CompareStringW CreateDirectoryA CreateDirectoryW CreateEventA CreateFileA CreateThread DeleteCriticalSection DeleteFileA DeleteFileW EnterCriticalSection EnumCalendarInfoA EnumResourceLanguagesA EnumResourceNamesA EnumResourceTypesA ExitProcess ExitThread FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW FindResourceA FindResourceExA FormatMessageA FreeEnvironmentStringsA FreeLibrary FreeResource GetACP GetCommandLineA GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryA GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatA GetEnvironmentStringsA GetExitCodeProcess GetFileAttributesA GetFileAttributesW GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetThreadLocale GetThreadPriority GetTickCount GetUserDefaultLCID GetVersionExA GetWindowsDirectoryA GlobalAddAtomA GlobalAlloc GlobalDeleteAtom GlobalLock GlobalReAlloc GlobalSize GlobalUnlock HeapAlloc HeapFree InitializeCriticalSection LeaveCriticalSection LoadLibraryA LoadResource LocalAlloc LocalFree LockResource MoveFileA MoveFileW MulDiv MultiByteToWideChar PeekNamedPipe ReadFile ReadProcessMemory RemoveDirectoryA RemoveDirectoryW ResetEvent ResumeThread SetCurrentDirectoryA SetCurrentDirectoryW SetEndOfFile SetEvent SetFileAttributesA SetFileAttributesW SetFilePointer SetLastError SetThreadLocale SetThreadPriority SetUnhandledExceptionFilter SizeofResource Sleep SuspendThread TerminateThread TlsAlloc TlsGetValue TlsSetValue TryEnterCriticalSection VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

ole32

OleInitialize OleUninitialize

oleaut32

SafeArrayAccessData SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SafeArrayUnaccessData SysAllocStringLen SysFreeString SysReAllocStringLen VariantChangeTypeEx VariantClear VariantCopy VariantInit

shell32

DragAcceptFiles DragFinish DragQueryFileA DragQueryFileW

user32

AdjustWindowRectEx BeginPaint BringWindowToTop CallNextHookEx CallWindowProcA CallWindowProcW CharLowerA CharLowerBuffA CharLowerBuffW CharToOemA CharUpperA CharUpperBuffA CharUpperBuffW ChildWindowFromPointEx ClientToScreen CloseClipboard CopyImage CountClipboardFormats CreateCaret CreateIconIndirect CreateMenu CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcA DefWindowProcW DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawMenuBar DrawStateA DrawStateW DrawTextA DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndPaint EnumClipboardFormats EnumPropsA EnumThreadWindows FillRect FrameRect GetActiveWindow GetCapture GetCaretPos GetClassInfoA GetClassInfoW GetClassNameA GetClientRect GetClipboardData GetClipboardFormatNameA GetCursorPos GetDC GetDCEx GetDesktopWindow GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyState GetMenu GetMenuItemCount GetMenuItemInfoA GetParent GetPropA GetScrollInfo GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetWindow GetWindowDC GetWindowLongA GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextA GetWindowTextLengthA GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId HideCaret InflateRect InsertMenuItemA IntersectRect InvalidateRect InvalidateRgn IsClipboardFormatAvailable IsIconic IsMenu IsWindow IsWindowEnabled IsWindowVisible IsZoomed KillTimer LoadCursorA LoadIconA LoadImageA MapWindowPoints MessageBeep MessageBoxA MessageBoxW MsgWaitForMultipleObjects OemToCharA OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageA PostQuitMessage RedrawWindow RegisterClassA RegisterClassW RegisterClipboardFormatA ReleaseCapture ReleaseDC RemoveMenu RemovePropA ScreenToClient ScrollWindow ScrollWindowEx SendMessageA SendMessageW SetActiveWindow SetCapture SetCaretPos SetClassLongA SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetMenu SetMenuItemInfoA SetParent SetPropA SetRect SetScrollInfo SetSysColors SetTimer SetWindowLongA SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextA SetWindowTextW ShowCaret ShowOwnedPopups ShowScrollBar ShowWindow SystemParametersInfoA TrackPopupMenuEx TranslateMessage UnregisterClassA UnregisterClassW UpdateWindow WindowFromDC WindowFromPoint

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1.exe.vmp

SHA256 617b5101a17ab300d77bb15c34182879ee2ee1cd1341a9a19c12dbe53cc47736
MD5 eb7d9181b30a74c032a6f02596732c18
SHA1 c269b41c403e2dbff9ec6bec563ed130c76930e1
SHA512 0895882ca49ad318087ce4d7b7c819235360a330b59a810c557cd740809f1f9872b3d3238a2a08959c538dc2fd442c8171785e307c0a73efa8af428e791b9fe7
TLSH
T187018910A22E7F18412B019327E58DA134F7F344416A064599EA48A5FF64D048AA73FF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1.lpi

SHA256 dea909b2741b20d021f9246761bcf8898ee7fe0835e5225503032068f2b98a30
MD5 bb9256807c2e3d1716f6760c84fa6ff3
SHA1 46c54dd0a03f0141cbdcf39a651b2bf6f8fc3598
SHA512 d020bfadc2341e3bdec6b460d9e8e60ec47cdbe63536a5dfb88270a5be5a74b11e3f71c68400ac63f0db3699dae615345a55a260e4a8a79445916f49a17acd47
TLSH
T13F618B29A0F8CF2265830E90369144A27FAEC3D703458426B48C8ED48FFAD5A11779FD
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/project1.lpr

SHA256 9f9fb18c6dc89623486539c3c292c4ef6c2bfa77df5ad7c15a868144004b7b8d
MD5 37b3ade48c17b370d71367934cb696cf
SHA1 91d81186f636a22b997c09e2128184aadc781063
SHA512 250adc07fb5defdd4543592412469f2e7cbff6e1c260799e152598294821af5b7652f61617c93260ac6a7517fc059f84d43e9c8f335872b4094ae2d8de057ab9
TLSH
T1AEE0CDFB5FBD40C2B5C774F21506C883645FA33C0D8571882A64C066454DA9466677B6
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/unit1.lfm

SHA256 597ecf1797795253bd658940faadceda24781e1aaeea09dbb1c0f036d50b0464
MD5 2e6eec224b0e02ee313377b9e8c2a196
SHA1 2ba5964c3c777d18a5afbb104e4307180b044dc9
SHA512 1f283ff726edc44520bcbbc220181a418c3d686f3b620aaf72bd3609b1dfb6d7f9993fbd1b72a0b0330ac4108eb3ac367ae5c25f187cdc521c3586cb3a4136da
TLSH
T1A60189BC5524932058A3D137A4030D4D6C36BA630543B829BBC3DDAAAFD3D16D7E27C2
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/unit1.lrs

SHA256 a37f486b2b5775ed31e0c5e2da43f156f113b16e011c99f8244318d47e876ffc
MD5 989dbe32884efdcf2e4f724571872b0f
SHA1 44a8784e7e75a0e90175157155e472f3940c4f81
SHA512 0b39375aa74ea5a911f87bc99fc29cb11ffc6b05dcc03a0dd165715d48c6dcbede6281123139353fdf2f578b2f9bdce9078c328b0508f316b3f190188f170617
TLSH
T15A110E553E053112C244E2AA6BCF4D9F8A2704668697A8A98E922417C9B320C90726F1
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Lazarus/unit1.pas

SHA256 5cc1ac34a5c2280f8d820b02857d0b51b57ec335310656fdd0b8b7836999351b
MD5 241f024641324357bdadbff5933658f8
SHA1 a6605a80be48fa81981f84102f837e1994c98fe2
SHA512 ee491fb7973a22828973bf0b6c6d7dbeac3c4cc3024c4d9b3a1d7f4c1d5b8ad0c8d8266ad8cba23f64a03ac1cb0a3f8e6f8e6ead0d2aa4cfea3cef30eec52c23
TLSH
T1100112605B5E2A16511390F832174C03E9A4D0351799ECD17057B5C24FC980A6776BAF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/Project1.asm

SHA256 f7bb4233b5aa7b93592e01df774e9f82b0efd280a44e1a59036ea4cbfb5d67e7
MD5 3eb54c6eba81b5d9c99ed1c17e460c0c
SHA1 9ba415f9b2c4e7b40d6e9c025e10f8afaec3b6bf
SHA512 6116053378a89047594c734971df9ea110fae52c44159eb4f256c0229e64d7fc735cbd50428ecb9513d7a4c548da519720853ea8352e69be04200e13ed73c439
TLSH
T115513F024919056699C277023CE39C06A456A123BF71CF14381E82C65FC77AC8F7378F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/Project1.exe.vmp

SHA256 617b5101a17ab300d77bb15c34182879ee2ee1cd1341a9a19c12dbe53cc47736
MD5 eb7d9181b30a74c032a6f02596732c18
SHA1 c269b41c403e2dbff9ec6bec563ed130c76930e1
SHA512 0895882ca49ad318087ce4d7b7c819235360a330b59a810c557cd740809f1f9872b3d3238a2a08959c538dc2fd442c8171785e307c0a73efa8af428e791b9fe7
TLSH
T187018910A22E7F18412B019327E58DA134F7F344416A064599EA48A5FF64D048AA73FF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/Project1.inc

SHA256 1e40aace82c18817309aee4326e35a7f0a8274652b62ff488c3a5d0b4102af05
MD5 073cdf915e3635ea1ee54eb5374e2eb6
SHA1 2f1edfef7f724c273621253e3fb612929b78c0b2
SHA512 6d66909c0ad8409044e31fd23e49769dba5fc9b95ddb9a94780e0fae4d5a2fc37e6154e03621468015e69089f9e6353fb77ed5e871460b943f594c3ae023e58b
SSDEEP 48:1IC3A7zUhOczWaFHNzWVw2wBb01bvA5urNZFN9KNIiKgfN45wIMMk1Ev40QU0tBA:rQ4+GOtCl0bgQBchw6IgHzk
TLSH
T12FD1EE03ED8815A83B52D5B239FFB507C188202B7EC784597C6C2711EF2AA8CB39E355
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/VMProtectSDK.inc

SHA256 fbef4175ad9de7bd12d6f206c278c1db27fd969f3d80fe7eed0dacf868ac1258
MD5 74e11b2a2530e65bccd69618a9f9233e
SHA1 c0d8f10acad9c228adb7e949e65d3400bbd5c85a
SHA512 c0f5a5ecc753d2dab9e1403faac61876f30dc9712273ab6598dabc17ae71c242ab1296b84c4b43292071594215629da0013a6e7d19251fb43d405ce9ff56dd5a
TLSH
T1EF4124029524368EC0AB48B57A25BC903C97F99553FCEB6F60A50803134312DE7FCE9B
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/VMProtectSDK32.lib

SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
TLSH
T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/VMProtectSDK64.dll

IMPHASH 1851ff453adce0cef5274e320d5bed3c
SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
MD5 db4f1a1406d292162a3b99d1fbb74822
SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
TLSH
T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/VMProtectSDK64.lib

SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
MD5 32599fe22a118732b9261e1fcd4f94fc
SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
TLSH
T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MASM/makeit.bat

SHA256 76ec28ad5d170827a84264aa846f52cdb845aa06222ab7305979e8f8163dc8c8
MD5 fbbbbfdb873bf614df875b42e28535c0
SHA1 9e51d38c0287aa4c6844a08d142e7c7e4088b30a
SHA512 4d23febcaaed84a3839f6a893c018d94949bba8a36053f3e6a887a173c523218d5be5158c9503942f73f185f4c0af10ab4a4460582274dbcffc13e13961fe981
TLSH
T19D31BB256D1D874BBFF4C48AED04AA42F34657B6A67C2239C0A584EBF0403102B3E243
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/Project1.cpp

SHA256 3de141f77eb4dccd92622303209a0ab2c9a201e40fd517ed703d0aaa40adba8a
MD5 587b3fa79afc01210ef06543f3b3c8ce
SHA1 51375d2dd5fb950d2f4e4f535ede6e6c39b9a073
SHA512 6e48c87f737706155bc13dbe8ad13444e6ced28782cca61cf87ccd55178ecc85344c3f892f53410634a541a00737fa9c6279651c96634fab62e39cabcd670e5f
TLSH
T19A213F04CA5C3C03E6A701883FE7DD94613C151317B490697A8EE2E07F2A7A99837FD6
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/Project1.sln

SHA256 4f8331171237a24504500ec43f10179b81e0c12481bb7558dbddcbbb4d8a889b
MD5 5f2e3193373bcdf496c8d28c72f2b1b7
SHA1 576c09b2ebe70eeb0079bc434c871d59fbdd7027
SHA512 6cded998736aeecf5be157b167593d95e2955f05ef315bd2e383e1aa7fd38276cd11a8b310078ebfecc6568809c27ad7b829da9460e280ba3449d81d57d33dae
TLSH
T13D11327D100F3CA2228AAA5FD1FD1E66BF7363A0C26C2A3C28A8E0559F22711C507497
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/Project1.vcxproj

SHA256 768e422d7d1d4b65e29ce22631d7fa39797317a327ada0f18fd868275c974df1
MD5 460f89e12cbb9fe4ab1fa564be9c18a1
SHA1 335aeb811d16de030cadb455a159c3f112007026
SHA512 64cf647d723ca9645099a77e0d57271a75c6dc0bf4accc567c0773b0bb0765f0eb17b1e9428236825533ac16badb2dfb490e77e580346f0da7a3ed1a29e85892
SSDEEP 96:9pofQwyaLwD2DyaLwD20Al2ADZIvwyaoAX6qolvN4aoC:LDADyaqqm4al
TLSH
T1A2E10259E8F86E1BC1810163C6E765805EB2C38B8E55486CF9AEC78D9F632486217F72
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/Project1.vcxproj.filters

SHA256 f0a61e3c472683cb8dcdfac4f72be89150b66727199488fdc8f4657879ad401e
MD5 6d9ff36db49678101a37d97730882e45
SHA1 7098ec2be97dbb962b677cef9d2dc1ed5d6863b0
SHA512 35de134113f703cd1c96f39207105b09058e3cc08906be469fb2913e7f21914f0df5333f0e505aaaae5e12516559d3711b43ce20d13cfded744896a2546b6648
TLSH
T1AD213531C4FC2B9CA1215D57FB84CD096FB8B2F764E111487AE9D0472BE33098167A68
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/Resource.rc

SHA256 be5a991ce5b6c63b9c78f55e3b3837e9191822af4347be8b97540ed023f5e383
MD5 0a62f61ba415b3eb23afa04141d11a71
SHA1 178c10befff02ae550841bfa10bd826e5ca6324f
SHA512 bc551c1831346bde920baf14d2d7c186890283b31e5c1ac24611487ecec7be78d831518a6b6074611c067f76e6711ec720ada772c297789d8d6fca676867f19c
TLSH
T1A831D562C6019372446471F04C053CDA9268CF6F4B369628729E359CDFB779402E45AA
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/StdAfx.cpp

SHA256 04ee5cfc38e499b0862ed1265051cc62862dc162051e41491160ab838d605ece
MD5 ee8ee42195702ee4f004e1d9c745a109
SHA1 93f64c4e47688fe500e84bc4f99163b8d3428e41
SHA512 78a812662a7743131c5f15d5ad214dc005015a58ed2a4a36fdd1eed2aab3f3a297267b39da4d4eddc8b71e78f61a38c79c69a26574643a5a87c7361a4bc476b5
TLSH
T1BFD0CD7AD55C55B1D4914490B247A98B630AE115D36445244009224EF1276ABADC39DB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/StdAfx.h

SHA256 53c8d77c61af38ba8e49b41ff4e6beff944f0244bc8da5abf9161701583b35fb
MD5 c1996716df99d709027aa90ed335661b
SHA1 3b78ecf714bdc0a6f2ca485d4dd7c6c64336a6c4
SHA512 1bd4380c377d05ea87f02bffd22f19220dc588c065a31f9703b27a0591048ae14cb0de6fb0d25c0649855480fea4be32078f0c940b6c2a797705ddd64de99481
TLSH
T1E4016552DCAC0841A01030E9BC443F19700DB82B2B880290A4436CDCBDABACC2DF7F5F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/VMProtectSDK32.lib

SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
TLSH
T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/VMProtectSDK64.lib

SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
MD5 32599fe22a118732b9261e1fcd4f94fc
SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
TLSH
T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/bin/Project1.exe

IMPHASH a9dccdf6743a7166d3342a2be5a7ac84
SHA256 5295cf2336ba6f0f91039aece6aa2a3d3a613887db30200524fedbd2d0099168
MD5 70c2135f72e3c93411699807852a6749
SHA1 460f2e2e42e1ac7adcf1837c8b18ca30cb5cedbb
SHA512 eb0b9673fc3c506ea2e25eb02896ba9346506fbeda30b0965efc8d4e733b4bed9d90b275fd4739b2671ad5973c6e40743be477ee0ade13a4737e2d3812fce6b7
SSDEEP 768:hWyWgCiQvDJ8Eh3Ovopls9wUED0XnDzm8yXBC:IyhQvFP36Kls9Ox
TLSH
T159F24B1175D38432E1A2693518B1D1B19A7F3D4327B1819F3B8812BE5FB17C19EB83AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4853

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/bin/Project1.exe.vmp

SHA256 617b5101a17ab300d77bb15c34182879ee2ee1cd1341a9a19c12dbe53cc47736
MD5 eb7d9181b30a74c032a6f02596732c18
SHA1 c269b41c403e2dbff9ec6bec563ed130c76930e1
SHA512 0895882ca49ad318087ce4d7b7c819235360a330b59a810c557cd740809f1f9872b3d3238a2a08959c538dc2fd442c8171785e307c0a73efa8af428e791b9fe7
TLSH
T187018910A22E7F18412B019327E58DA134F7F344416A064599EA48A5FF64D048AA73FF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/bin/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/bin/VMProtectSDK64.dll

IMPHASH 1851ff453adce0cef5274e320d5bed3c
SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
MD5 db4f1a1406d292162a3b99d1fbb74822
SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
TLSH
T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Code Markers/MSVC/resource.h

SHA256 8518718221ba2062207f387cb37e54dbb22970e185db4a89977bbbf6529e1dc1
MD5 f0b5117fbb5aef7bdc86460f0710fc41
SHA1 2c69b8e109f1f5d0bff77af6277caaf6629ba049
SHA512 af21e88ec23e2f91357d4a2417ab05a84f0edf95268211bee299501682de2cf10888e10f6838fbc4c4d305b7bd0f9247d39243c89025af6ee52e627430785177
TLSH
T1FAF0E2314C88E44399A4F0CA10896A170B5DFEABA559067FB2CC54ECEF6626103EE4CF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/Project1.cpp

SHA256 cae7747ad560a02de505f1d7a7981d7bbcc995a4759cf8b33da9ca79e4b915d9
MD5 496685e84f93c0ca7867e0bd36bc8664
SHA1 97a477cc6a2efa57d6983097bc6996bd4ed8184b
SHA512 9fdde8a4d56d554493bf52a34fb2d1605c4fe11ddff1420e0c31b31a043e4f1d2b970e588456abc1ec5e19c481749791b40b601ae89ff5ab67c6eb6d3404314a
TLSH
T122214144DA5C3C03F7A6018C3FE6DD54613D591316B490687A8EE2907F6ABAA8832FD7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/Project1.dev

SHA256 72be177372bcba6c93b66cc77fdc55a150e03b3c6770690f57585602ddd376cf
MD5 9995c10c37249bcb107cba7b15d51df9
SHA1 077597b45dd675cac658601145bab3971323526f
SHA512 314ddba710ae99f619b849c2981bbeaaa17c3629dcd5ce60bb5c66bc166f439b229d6ba3fdc19a107ac83e3019b634078570eee98eecd4cefa2da95657287e3d
TLSH
T1AB11FCBD823C89BAE1EEB2625B34FE8277E2776C08F4585906D0CCC4A3E224D907F455
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/Project1.exe

IMPHASH 60cebcec59e5019b6aa223ba1a5c67c5
SHA256 2097c7152947afcf7c00314be716b2ac549b6013a8e9543e96ebfaa49644d98d
MD5 74a7af8a2bbfe03a080b0963a1250eeb
SHA1 61a8ef89d25def1f0fcae6adf24fdbf11076417d
SHA512 c7b25eeb9cdcc4b447734f80361e5377d720e4127f44011e61c9e012b2447503bb06cbf78acfa23728eb98ab132cf3e227352d1b7f994f5a15de77dfddf91085
SSDEEP 192:lFHEzcky2wf75YyB634idZcF7pb2zP1fzkM67awraZCDn:abwD51635rL5otracj
TLSH
T1839277E67EE95CC6EA64627CD9B6D6313A3CF5F00B538B13563895325B22E823DD4203
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4672

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/Project1.exe.vmp

SHA256 617b5101a17ab300d77bb15c34182879ee2ee1cd1341a9a19c12dbe53cc47736
MD5 eb7d9181b30a74c032a6f02596732c18
SHA1 c269b41c403e2dbff9ec6bec563ed130c76930e1
SHA512 0895882ca49ad318087ce4d7b7c819235360a330b59a810c557cd740809f1f9872b3d3238a2a08959c538dc2fd442c8171785e307c0a73efa8af428e791b9fe7
TLSH
T187018910A22E7F18412B019327E58DA134F7F344416A064599EA48A5FF64D048AA73FF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/Project1_private.h

SHA256 26298ef3bbddb7dd5c2fab34ec895f0cf252fb282761ad839ceaa0adf880a483
MD5 28ac76b8d908d453e3255f993c3a0808
SHA1 4afb51a97ef5a9593e1afff8b07e5f66031e1b51
SHA512 8e737f3da8b3a8f74d755bfa5fca881ef4ba9833e124ff9831f4bc65f2dcba0af1078825097729f6195bf631342fb0a2de9f9bd48ba9ccb91d22fb756517b7e9
TLSH
T155F0F02B0FC49711133AF2C2508C31A66188CD376B082CCC7E901C3E5CE840A22F8ACE
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/Project1_private.rc

SHA256 2e9beadaf1fc04fca0daa81ecfd315811a371c0406868c601528c2200ca3ced5
MD5 15c1436cd3e9f1a7b0f2a588513d0b84
SHA1 bab8242fcbe67c8e7e8afaa117603c0355ccefa5
SHA512 22795de73511b85bbb4f561d97193406f0988d28b41b5fdfa5cc733a2f6ed7eaa4d201847bc04346a8920742e98299d1fa6634c174e8c1490e3f6708a52e294f
TLSH
T16DB01282526C766250162B817019F000000B6305B12D1C1C6425215DB72144C1007B94
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/Resource.rc

SHA256 9fec6689d3fe0841f9e4faf152d052159b533c239ee78ead27306423e7fc8b73
MD5 131bec280e56c0db0bfe08f3bc4eaa7f
SHA1 66e78362bb6ec781c2494ebe3deb85f0560aadcb
SHA512 696f533eb888a04035b0c4579cf8a662cbeb3ef2e6443aadafa0372f21c2f919bd5798076fdd2a0401e5d3629e2c5fb055157ef8183045efec6983f714b9eae0
TLSH
T1D631D262CA009372846471F04C053CDAA268CF6F4B369628B29E35DCDFB779402E49AA
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/VMProtectSDK32.a

SHA256 9178ee81695517887c0c9be31376ab5a56346750551624ae0f5228e0c123bb3c
MD5 b5564ee16bf952395e66517c054bb580
SHA1 609e01d7dc825268f192987b484a2a98eac7e7d4
SHA512 ae405adc10cabb9b7a09968e0fbd018930c3fb842c6586860fdc999fb0e0e311b26167b27e420a53b2bbe802c6dac778fc85265be8c14c5857ad03b25f583342
SSDEEP 192:/1+6gR0nhWkwpJUOyVjMM1Nh/0hce2+0BRMbG17j:/oR0KEQlw3
TLSH
T1DB9205B2B6931D8BE2B591BD958BDF22273CF0D15A66CB23322C64700BD1D4A3EC554B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/makeit.bat

SHA256 73992b9177f5ade63d02e7fad105f06dc296639b3024130e1bc19db4dd3f2902
MD5 73a7d199f8452e85fd29e096978f1bcf
SHA1 614010ea7fc57c153de12a6313876bd11157a81d
SHA512 1c27da470e4e2d236709b7758f219285f6bf3f05fe53c6bc33aa194caaad17d9d26bff06d45046fb4ed9b63a77c82e1de07e2a63f310479727ad47470a082fe0
TLSH
T1CCC08C2B162CD139F1B06AC320914AE0A4A201288872243CF82E80E433FC3020B2BD27
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/MinGW/resource.h

SHA256 95e5f6baf50b213a5bf74678073bff9eadbf3eb3749d491b61a878624e75f43c
MD5 45b2ae3a67623cb6daf501c8328bf179
SHA1 d0e361dd789e02b53ccf21b6c1dc3f535a7f7b85
SHA512 44541a0906fdf9752793ad12174f11fd2caf5dc1caec538008bd693e984944ab8e76727c7cad7eee2aef49c4995ebb11c14ed840c5712f4f585da527702510b4
TLSH
T19CC092208CC078C1AA69D00910DC8306028ADA274EB94298324D08CD4F8818003FA4CF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/App.config

SHA256 9c1fdc6e9e5b5a88c5cf1e04c56fda985c2e8ae8830cb97ffc4acd36a3917385
MD5 a58dc3c8c50158009373610baf187c58
SHA1 79ca73f0991ff00598477fd6c7f3d43faca6e6fc
SHA512 b61fccf135711663919fb4fd84d72eadcf9ffb436d69d2180f9086fc672ad9a9e92d2fd48b50333404ef2f8c4b556e203171a227c54fae21b83a99de85ad7ec1
TLSH
T11CC04C9945A8BE7B5C124B83664085539FF04292A164110CF15FAE540B2194D420B366
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/Form1.Designer.cs

SHA256 9e5202ca63943d9744b2c1c585f88cd048d11d87800cc31f18564c10e9ea326e
MD5 e233ebe544830e9c6fd1f937b9eef36e
SHA1 23a7e481445297c04c664dedfba5691c55bff8f0
SHA512 27f34a4297f556d86d650395f9430b53f1780906a7c6c5f6fe780bfd378b54d4a710a08627b1d8ba1e675c9a269e56aa10fc80ce26baf7672a45a24ddcb7d41f
TLSH
T13C517C64575E8E1C76A3E0CC85159BC06A7D8D23F6510C2F7EE94CBCA2A7D0A42691F3
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/Form1.cs

SHA256 a9d03226adac7382bce537573bd8c7fa31bbc568e2b126d74b30bed56a8f713b
MD5 c52d79572a54e0c47eb3d517d013b4c9
SHA1 b55f27175f096cb7a6dcdeaba254a8d5c7786184
SHA512 fb39f33a65ad3d5904b742af9b9fc35ed10e95b59e960a9970345f6ed727b26b08e51790fb41df1551b75d35ecb593ed394b4f741ac642811aa78f9a828afaf4
TLSH
T1B611C008BF884D5E029040C96B24EED07DDD56331F920A67EED601C9F62BC86423EF83
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/Form1.resx

SHA256 4d3ee9059f5b98ab1806f6916ebea2a8c56023f8c63ddfd80b7378d27d1aa0f6
MD5 96ba0a444d087ae06f32319ca4f0a3e4
SHA1 e3e08973b3d47c1ad51ccb133315b6242e275f0f
SHA512 571d4083c76428d8c3914b2bc1281cc79ed4603b5fe0e3e82ee58dad488fcfe7f797a45b0ea7f14841a2a100656f059c186b7338ce33beb910cdddbf9ee70cbb
SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202lUt:Zf+tLPfYnLvFVOiFQaUD7Ut
TLSH
T172C11E45B2D1ED260E93483CD65139847BA8923F0234AC94B4DC961E5F92B85A7B33FA
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/Program.cs

SHA256 976a4332d93908d2003e544bbff47091b870a66f18dcab879509bf900b15355c
MD5 6621a4be72daf59f23cec76efa225f33
SHA1 84b9bc7b5c83129de5486f933cb1708f15e32494
SHA512 c611ede29bc047b629e4f10550437f4d774b87c4123fcb13ec876f2e3843a21508780b0734374a6f5ecb02f762ad47e9d049a8e1ea38e8766c3e06cdd24d5e80
TLSH
T18EE020AABDAED5584AD354B7040545C862776A3C4EB634515874CCB5D415209433DD82
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/Project1.csproj

SHA256 e064b83f4834ef79a7b908e0de87d8f5f6888c18935fa98366c14aaa5bfa70fa
MD5 692ae5294c03d3163e5dc952c5ee33f7
SHA1 d02ff912a41f1f282fd0f772fc812138d6037775
SHA512 7c95655bc0a4198dc157178aaec7a875b134aa08a403d85b438187e83edbbcef4b9fcd9cd1dd11940dba5b40f24dfe6d761a5b1b578da9298cf30c40f0c3e149
SSDEEP 48:3wWLjNJpxUP9fQAY90HaJ5BpWae4aJVye4aJpPT6Ix6t26i6FPpP4tDBDJptDiGr:FPnpqdo9DoFTBxs2hj+HWHHthQTcl/
TLSH
T12B812060E7FC6BFA6360017B96556D810FB862F368910498F68FD10D1F52B592307B77
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/Properties/AssemblyInfo.cs

SHA256 2feac6b3149f92bebd7ed83fdb6ef1e7cb07e61434454343f21a7c3c82f5a25d
MD5 9893fab339503a252f30f700f9cd4ab9
SHA1 48bc129ceb95776faea62f01e679e8d61a348ea5
SHA512 44f6820ac11900fc6124bc2479f5f1a6dc6f878405e1fe223c09fdb4cbc2221482cbc9e9d5b0c488a744c7d387246df343d787c27d4a7fb9001f81a08c8e40d5
TLSH
T1861123A02646B33E8F079153EEA331880A7E636C54CD5D2578FD1C13F806A34026BE23
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/bin/Project1.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 70d72b35874fbf4f06d9899e9fa90fb7db292e8c41dbe5747c22a40ee9053ca7
MD5 a2fe9367cd01c04ef07c9bf42e35954c
SHA1 ae98a732f77ef44a8249b3160f57ba95c7189375
SHA512 ab0f282da62b3288e2258d48dd21b88ea977580085fcc12e8e5c975c09fa542fc5987897d7cadc829e85fd9b8a55870d9a7296e83b167fd95944869f4d0f6b27
SSDEEP 96:LbvvBrt7hdwFGl5PSuzvCtjDarh6TCMBhlXWNeMzNt:Lbrh2GCMvojAh6TCMBh9WI2
TLSH
T191F1D718B3E48273ECB70B729DE37E800B79F6116CA3C79E5886258F6D637014512753
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12898

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Ivan\Projects\vmpsoft\vmprotect\examples\code markers\Net\obj\Release\Project1.pdb

VMProtect Lite 3.10.4/VMProtect/Code Markers/Net/bin/VMProtect.SDK.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b560d162c060b9ce441a8ab9a4ae9d4e0a8121145bf443789c2d978e5f645f75
MD5 fb3f3c72e482cd1014dc0b6daf857421
SHA1 1dc14bc418aa4985dc2cf1621d7cb7c6409da0c5
SHA512 72f55b33826c75aca5dfb0b991722e83dd910cf36d6199159bcd5bcee078dfc407ee16f0855fd3274b6829a39b37ca722c45dcc28f3994b44543b602e5bf2d87
SSDEEP 96:XbeBWY8lNW5lleAWbgjaJvbdI8cH4YJDcbNVOz8RpFxrPOPXCr3c7isLtKMHAUYu:ZY8zWUAOgjSjR+JdzwFxrhfMHDn
TLSH
T1A822A712B3E8A15AF5FB6731AD72113107B7BA594A76CE3F148D010F0B37A546BA0B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb

VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/Form1.frm

SHA256 75d5dd56290db229de40fc3360700ba91370d79898ef0edde71c8f34cb3c4f07
MD5 6b6d3bd041b7f5b4335cd0e60cb864bc
SHA1 773c197cec4044e62d6f54dfd290d95a90952337
SHA512 364872eda0be356b91fbda3837e08fc4b1c812e257f2c599e89335b834c9169347c23c6b99065f1f21c065db175af0f9346773f248f87e4cd104f6ff8eb010a9
TLSH
T130319C4494CBE330184BD2508C279D047DA616A259536822BB4F82CD0FC7B7DA3FE7A7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/Project1.exe

IMPHASH 1c15af9dd6df387719122b359dc175be
SHA256 3022f931ab6972d42171da9994d4d01e6031e72ad632a59e66d058999a5cb546
MD5 a76b5af5f70dccb3d21fa40d3084858d
SHA1 ad42a6581d6f348c7c5f9ff6867eaf95107bee57
SHA512 1ff0f58b9d65aaf0068a854a679423c1896112c4005d22776007f61c5aac841d2c0f3bc1b4754927f52ad95d8f320c5a845b779e9190c7de498489e76778a700
SSDEEP 96:P4zZGj57YNbJh/PA+1AzUxjT7DTNsRJ+nsYjkjLK9wjPTtYDSLtdgGDD2+xuUI2:rSNbH/PA+3/Nfsoy+9wDTi6tdFD2AI
TLSH
T13D926453F5582A32FA8587714D33CBAE2A637C302D61CD2B39453B1E1D74A425EE361B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4592

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/Project1.exe.vmp

SHA256 617b5101a17ab300d77bb15c34182879ee2ee1cd1341a9a19c12dbe53cc47736
MD5 eb7d9181b30a74c032a6f02596732c18
SHA1 c269b41c403e2dbff9ec6bec563ed130c76930e1
SHA512 0895882ca49ad318087ce4d7b7c819235360a330b59a810c557cd740809f1f9872b3d3238a2a08959c538dc2fd442c8171785e307c0a73efa8af428e791b9fe7
TLSH
T187018910A22E7F18412B019327E58DA134F7F344416A064599EA48A5FF64D048AA73FF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/Project1.vbp

SHA256 753396ebdc6347f2ba8971b69ec9b5076c924206e77e83b0e6936c8d064caf90
MD5 87b4da36842cd31173179fffedf336be
SHA1 47490c4f0d50d1d2305ae89de45e125e7458b2ef
SHA512 4b72c27809404038160e21c472c6a4e02a3bc3232b5701058ad111c07ea7e2a558f70dde08f3d664c96168284640d1a7149f83f1357e66b635716e2d1704598a
TLSH
T1B501FEC0A12034E9F71524235ED63A413D66B72846E0302D44F8E8A04A96D3D87636B7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/Project1.vbw

SHA256 77966659adfdaf0b27546af29810f3835eafa122a4d085f9552df2ae160659dc
MD5 05c3c16294679b935303dfe950e41a03
SHA1 48d5f64e0524f521289398f069ff29c4191e918f
SHA512 bd06751a0e19442156b0633e81e54dbc4fa9a17d59722b9f405080bf6e48b3da7c8d0f66733502b406a1d5f642fecc14c8b54475c537d0bf866f230242065585
TLSH
T1EE900241050300E84707A6D49A13D847402D758A214910A097744E4834845991853101
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/VMProtectSDK.bas

SHA256 84593433973f8040f33aeb52275b882e1ad35463cf4bebd5033931a01d85d2bc
MD5 02c7735bd54a41842ae9f1e4d94b4b88
SHA1 58f144805d56beae2fe54ce88c25047b11e30fc8
SHA512 d5c278592472d95ef57a6305ef5cb94139fe6f91695503286c4fd05c39ee45a746658791f2296b16419af8af357aa0aa35aef122f3c43a064f89a0bc95bf3e14
TLSH
T1C1816C9AE610BCB9C89560E43127DCEB7DEC62A539B9D391403462CF0FA2CCC2795677
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/VB6/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1.xcodeproj/project.pbxproj

SHA256 b164937dfbbd6e4985d94d73e4a51f6491e718601803498efdcaaa2de9e009d9
MD5 210ab0a46eab587beb3879a392e05cd6
SHA1 17a6d4ae8e68ea6bbde461c2c0466449af34e55c
SHA512 6337b99a81564d4433d21d89a4a5d049a437921624e905798a30973e96e9e8e9454679e11938b421e180c9935f3cd0f82ee3bcce38deb82dd74259e711d9fc2b
SSDEEP 192:VB71NsMOONZkIvFwkX5MkgILIKq++nQLNCjd/VjvBj4im1j+DFx8j+lF4t6W6rBG:VGG5NLP8dtj9A+DO+l86W6d6l6s
TLSH
T19F92F23E572D661D5DFD20A6A25E07D2F01DC23821986CFACCE7C1852CBA8588379BDD
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1.xcodeproj/project.xcworkspace/contents.xcworkspacedata

SHA256 46e45f2eb6e755170cb76d3a6f0d668be1753a2b3a39534fe4ebec2c9b6933b6
MD5 40e52505035ac7fad118febffe3f7708
SHA1 00c70c035436f4edfa332ffec5db515a5079e4d9
SHA512 60e0f36cef3ad656cd835305c47b1e0d4640fe36e31b3d5cb8297699a7107a89b9181663b5d3c9b63ebbf31d802c85534743d216168ac70ec3d88a374445be90
TLSH
T186C08CBA8250AB3539F18F010B06C008A3BC204E20640004B5ABCE942F4930883979D8
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/AppDelegate.h

SHA256 15eb2beeb83fe11c929df54b8e7660e2d3a0be563bdf6b81ac532feee342f945
MD5 cf7b107c802381b070826ebeff96c762
SHA1 ae44629913c64009598fe2004bdd01440f467c1d
SHA512 d26fc9ff055aa63c74ab6e93caf144f98a4c6481460ee32a1140e1b1b4a0ce8f27fe4724065e7016eda95c6c778b80801ff76e439e6197df9acadb103842d1a6
TLSH
T1C6E0C0ACA780F45797E500271A916EE3D816340B9AB145473B93C755F4E78B6C1CD333
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/AppDelegate.m

SHA256 87035dd597dcb1021272a469723bcf6f34c648605e248d9b3299efa6b03aef60
MD5 b6bac0571c69068ca621d50e7b161de6
SHA1 2b5e1a46c527a5582b38358c3351c23c56f67b8c
SHA512 6e18669db60c36862b0177e9a2dc44bee059ae6bd421d23327339b7890a174464777ed0c008acdf9c2f7af28b556b03af6005ce6818df767fe870c7e536a9671
TLSH
T18221FCC692521C1F43DE526B162ECA86E429141F9BAFC9413ADF0288AF02E35C756353
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Base.lproj/MainMenu.xib

SHA256 e63a57a3cc83e6ec0e5a9c0cd3d02a96cbad692abbc16eaf8751e1ff2cb6e5a7
MD5 99c26b36cf3aaf5ddc0589feac03e857
SHA1 0107c8be43f8ed7b8a7ec8a00ec9b3e0cb03113d
SHA512 70b9cefb8991018a16b679c3c14f18f8edee08c87489bde74b42458651c46ce8c1dce6b29197a11dd39e36220f3aa48a98c02cdf16beba5dff0c575e6604448b
SSDEEP 384:N0x8EOoL2KpHp+cSU2pIntqMmsT3XTntrsd6:N0x8E7L2KpHp+cSUQIntqMmsTXTnOM
TLSH
T1DF337B14B6FC63B4A137061A1AD5B228BF21D0D71746410CF69C8B641F7EE9752F3A8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Images.xcassets/AppIcon.appiconset/Contents.json

SHA256 884db26f7c9de0dd3e0542d616ba109636a804283b72dc2939a4c572a640d51a
MD5 ae32525a5fb7fbc90649c97d3f74b286
SHA1 6e541046c93bcc48fc79686d74c513d6ad572ab5
SHA512 914750333fd4fc922f0cbd7137c472ae7e7c144b54dbf8102c606c206a61bec344c664572dfbe45d26f7f9b9b53ade8648007b5486b68079fe04387281e67a0d
TLSH
T1DA1133EAC5653E8A111AD22229C9500120A7CF5B89AA3C593F5D43CC4F2E5DE18F0F3D
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1-Info.plist

SHA256 eb553eb4ead9dd2b2b7a7097f5111c8bb7b538b1dd95dae94dc1244e503b893b
MD5 54995fb34c2e5986cd1dfbf2ac491cb5
SHA1 36ec23209dad67f4160a8014e6b3960126b295da
SHA512 d5edfc36752bceed26d73eb5f2d44f7cc0ec33ad3fa4a40c4bfead75893ea34a9c616775909f5637c9505fa162094a0e1a43c6e844b22f792b3d6abeae17aabf
TLSH
T154113AF50A48719D1EC223BB16C2814E05D871CCDC3321FAF9C69A1DAC0E8066374AD4
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1-Prefix.pch

SHA256 d68c3773ffcff85f41cade88fdef7f13af4533253326ca0ee36464781e554cf6
MD5 8143f96adc31191816c526b884a6d245
SHA1 20e7bb07f31dd07e3d747bc425f9e4da53c91b38
SHA512 f6dc906d33ab1509be42de18a27dfd07a173b94c51b4b365529a37c1a33c77b9d7f92da0b33780f48160eb45cb4c7b627eb7ad0c27f93b912258236fe1318ff1
TLSH
T101C0222C18683216D00000114A4450E373AA7092DB00B008B010D059A1B8EBD04F2A86
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Info.plist

SHA256 165a458a5d25d78f59b50d2bd27849ec5e8f760a1e5f941d08f6fe0abea6de29
MD5 d4d96e45f25ad11322edd42c50602dec
SHA1 3ea35bee3f9619cf3d2e4ff45d3014d83698dc0a
SHA512 130567f862e5279d3f1b255bc79b7d9647ea41510ed37481f33d733b2f23d832123b6ad6596ac9792088af77962d6b8fb282cdd7795db497f455a4a89a79e93e
TLSH
T19B212BF50A0875893DC112A617C2514E11DD71CC5C3321FEFEC6A66CED1ED066375AE5
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/Project1

SHA256 0a43b7994826517144e8966a9891b3cc79d6f7cfc49fd1bd6455457b5dd28f7a
MD5 03cd91ac4295936399e7cdd94cd90ebf
SHA1 60a032b1d53a161f5cbf751fd4dffd2f4d226c35
SHA512 774eb2236f7d77af52681b970f84827793d482a33a181549d17e618a5d5c9a443cbbd22cc9b8ec64a494936ea250c5f2ad02a3e2e2add4cb113a6af81118919c
SSDEEP 768:wvOMf6zurtmdbJ7i7vUtvOZAKEIIeI/I8IRR6THELmZ:wvOc6z0mdIcOZDFEzZ
TLSH
T14243E88BBB508447C58B0039C42ECB18E129F76DCF51B2D76AE9DA9D4FA0A435F4271B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/MacOS/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/PkgInfo

SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
MD5 23b7d7d024abb0f558420e098800bf27
SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/Base.lproj/MainMenu.nib

SHA256 50a5ffbaa783b6e97fd5d1eb13241cd3236c93a32822799f9b19e5dbf66660e6
MD5 a14f8c59e65bc483c91c3eee3ddfad60
SHA1 9d363f6601628331f840751733eddc8f2688f81b
SHA512 e57a812b041b9a263de281f7b2069a9fbcec760c0bab00e52a2f01f3236128df716ddea3be607fba9149570766540001dde67181e01438b72af7ca28d558b15a
SSDEEP 768:3jcUnZRCgiTMl/vSZxHX5YGNOysGiaY++V8tWPTmdi2:xnZRCgiwt23F1t3d
TLSH
T124E23A41F9B237DCC3E70C63B1B3AE60CD5A2851EF8267661E38A3D06F5654CE546A0B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/Credits.rtf

SHA256 b4386fe1cef65cd91e6c8ecc065d117089083f91b7cadbf0c3e5eae20e8b9640
MD5 f0d4a61caf597423ff07c5e9b24a345e
SHA1 60a248148b319de26e36424d25021c2488e23ce8
SHA512 e361011499cf70fc71e247fdda71f49d913654a983aa4ae67d00dc977e53b9cf0d88d4d2ac07efe248261c3ab6e3345e829e22dda3e51dccc221a94c660ace69
TLSH
T1BBE05CB3E4403573628720033C9285391DA48B31E3465C4EB020F8C76079095F311CD6
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/Project1.app/Contents/Resources/en.lproj/InfoPlist.strings

SHA256 e27cacbf4f9358e9ad2056696e8c4cc4ebffd80d3030eb2c2fa94e6d57dca0f2
MD5 9c0f6778c773aa003952bd20169da983
SHA1 3926f2aefccded9ae9704abc34186df88d46c792
SHA512 6a5c273621720e2a94bffa822a6d934662f58e9f5dfc8ea0ea5508a730488a1cd8a995c03401931b0165d09be1b9c8b89ab001df4a33ba48ac811f7ae072afee
TLSH
T1CAB0120262F83800F0F20F2428B950705EB83C001C7423CD2350501904E0D00C270773
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/en.lproj/Credits.rtf

SHA256 b4386fe1cef65cd91e6c8ecc065d117089083f91b7cadbf0c3e5eae20e8b9640
MD5 f0d4a61caf597423ff07c5e9b24a345e
SHA1 60a248148b319de26e36424d25021c2488e23ce8
SHA512 e361011499cf70fc71e247fdda71f49d913654a983aa4ae67d00dc977e53b9cf0d88d4d2ac07efe248261c3ab6e3345e829e22dda3e51dccc221a94c660ace69
TLSH
T1BBE05CB3E4403573628720033C9285391DA48B31E3465C4EB020F8C76079095F311CD6
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/en.lproj/InfoPlist.strings

SHA256 feb5e820d68ed31f871d2bdaf8d14935ed343a7a875ddd774d5556da8dfd951a
MD5 b8f0b99a609bda18c49eed43bb052224
SHA1 8faaa0faa6cd692b602eb74340c754c739d5eaa3
SHA512 22b0c518333ab93a5078ff4e5ba56159855cf552b9566e07e30141b481c6d235b345eecf5d222a6f56e5d7c1587ab2c8b38e7bce4874873d411758d76583a885
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1/main.m

SHA256 6a8f1ca63b817c662b085a724a71f55167086484b76941a68af07665fe3a13f8
MD5 e891280f3d57b6825e661d62dae19064
SHA1 02099d15b7d7952a24a03adbfffa4c6de7db4e76
SHA512 ce7d67eddba05cd0349c2188c93df8c43d9ee96714a9cde920440347e5b118cd7d57a3fa0439adbedf323cf375e3ec474fc7e8c66d6a2dfc284597fe5a0eeb59
TLSH
T1BBD02EA801F1A58B9FD2A27F6889CA56A8A6740BA6B9A0420B1391064A228343590002
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1Tests/Project1Tests-Info.plist

SHA256 7f9d95b5aace5bf6759268b1cc9952fa994d069633973d1a2e0adfdbae6a9964
MD5 92473ba977105ecf8ce1162c495826d7
SHA1 661aeb2d7e9e215fa630f0cce03fa0c6cec46f9c
SHA512 9d553fe4b17a0618ae14eb70dfcfe5984d36656fad1c96f656ec3bdc2d1442b993ac9e65cbe20c01c8d37a0f46e4766d1d53a2a41f3aeeb9ce8c77dac7d51ba6
TLSH
T1430126F00A48759D1EC317BB16C2910E02D8A2CDDC7222FDF9C5AB58AD0E9066370AD5
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1Tests/Project1Tests.m

SHA256 c0cecd70fe36d020854f4432c10e30b9033aa90d5bc73dbebf805bf24b9b9efb
MD5 c12a7d1e64c196158ccde9f8cc9b076b
SHA1 66aeebf5bbc9c637181a5c564ef40dd31e2f7d07
SHA512 59e5aca0fb31ec9fa01bfd920fa3eb3f5369512e700d1fdc56f080ef2a7a4da42e0bfbe02a9fae07d6f1d76e76031584bdd97a95c5be52b3995d26d16867593f
TLSH
T14FF0DD5B0AC3A32336AE84DB414B536AF723AA13C5138120BD6BD5094A13E74327A423
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Code Markers/Xcode/Project1Tests/en.lproj/InfoPlist.strings

SHA256 feb5e820d68ed31f871d2bdaf8d14935ed343a7a875ddd774d5556da8dfd951a
MD5 b8f0b99a609bda18c49eed43bb052224
SHA1 8faaa0faa6cd692b602eb74340c754c739d5eaa3
SHA512 22b0c518333ab93a5078ff4e5ba56159855cf552b9566e07e30141b481c6d235b345eecf5d222a6f56e5d7c1587ab2c8b38e7bce4874873d411758d76583a885
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Delphi/KeyGenExample.dpr

SHA256 3fe6fedd8e8ceacf340b0dcd38bc3d895a859e274a74d8f0daea7ada344131b4
MD5 707ef658d28f688752d7da7be310e8e5
SHA1 1fc06bc7916bbb80047180b4a4f6e26bc704d8ba
SHA512 98ea0890ec757c48e349d8c29f31698f994eaac40dabb8372332297234f9938c3e61f436a2bbfc64544c2e1d2735ce3d207e81a5a971f56862c25a074f0a44d0
TLSH
T1106134DE9E17570E90963CB2E303ADA33819701B81F1CD9A20913AC48FA6619B7947DE
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Lib/KeyGen32.dll

IMPHASH 9e46d55512301a0e25ff020e01794a52
SHA256 f2f7756ee63221a0d65746a74e4ddc4d8044d01212d8142a26d79ca0acec49be
MD5 ed5611586543d36119984e5b4d962ec7
SHA1 3df7f5a5025792e19dc0862779ff9a5b9c73d279
SHA512 28c976a6e94aff7340ac9f111c386ef5b2050ebf161102a82a6b00d7499e99dd4cbcd15788ed16b5b928a0d54921d23b480928cc7f4164f9c08b351709ea8ce0
SSDEEP 768:ajqJuBbVqkcULZLoaZtS0wE63y8lF98hkYLCbNFTos8n0ED++clUb0ULJGI:LJuBRDCaJayYF9M+Oi+zLJr
TLSH
T14D537C10B690C033E1A62930A9B5A7669E7F3C015BF550CB7F980BBD5FB02D16A38367
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

18936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Lib/KeyGen32.lib

SHA256 3964724f3a06b1a1507ddf33595b3fb13ff22f3c484be438af7534f6175c5568
MD5 a4d8c1e647c940ce20371391513becc0
SHA1 c36da7f3bffe0c054c5b6def2dd9533c1d75f9ab
SHA512 4d1b32d629348295ff4a07df31bff67e50a49fa01873845549c32ab81634020584ccc00690b58a882b9a8a2f5a8b67f06bf2883d52d40802a12a772e7b1804ca
TLSH
T1BB5159916547BCABC857D9B08542ECA5721C2403D7E5EAFF351C84A383EB74AB79408A
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Lib/KeyGen64.dll

IMPHASH 44d72ff3208e2f77edc20a3432274582
SHA256 36cfd91644f4bf6c28fb1d930c7ace03803b35002da5e7d4a6b756b20c97df0f
MD5 96a346078d81b1fbbc605752030c8863
SHA1 97f75c29cf832f7902778bb5b4d3b49354e2acc3
SHA512 a52cc105bed46dbc13b46f57dc060376158b8f3711961efc0e3ee07b3aad7489f23bc274e52e9f26a594f5d3f1722d094b959c24b76f459a8acec3902bf1a428
SSDEEP 1536:wCkiPbixLCodLXP3ZJwtvgKwTADEM3bht8xgOqlwkOZ/n/:8P/wRQTAIMNt0gOqSkOJ/
TLSH
T13D73180973A800B9E0678279C8E79A46E7B2F842677293DF5364035E2F637D15E39372
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

22376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Lib/KeyGen64.lib

SHA256 666a61c98bfa6bd4812130c01f4b9f2fdd71a07818713c5bd1a967dee92bf62b
MD5 68ef9d4aa6d3634595612e02c3ff2977
SHA1 cb7f713baef1f741ea6bdba73a9edd221c701f06
SHA512 d425590c0a956e67904bbf07cd72ce9d3a7da7e814f71661a6ff1e8e661703345c6625df1c8988b566936f2bd0010dcf84f07e04db9a08b815310e6218741f20
TLSH
T17E51DDD07A5378EFC555AAB44007ECA6321D201353A5DEEF350C45A643EBB4EF79843A
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Lib/KeyGenAPI.h

SHA256 c378519b93f21e820f2dc3e37c9a8f080b94b560798d80884df0ff11aa762dfa
MD5 e4a3fab3713f00f486b598c7a38b4aa2
SHA1 046e6f94f508501e93ae1f5a1a9bbc868c00dd9e
SHA512 8ccad91eb7eef89a09ae3a6077d1f5d007525a898a3e26df4734d2a93ea60a647be7573eec90671329574e31cf4bb5b6ed82917750142e2cf87037b35da41bd6
TLSH
T1434103D8A9156397D1A83AF0E16FFC52340A300A28F6CEDF161A1712E7930452BD99EF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/MSVC/KeyGenAPI.h

SHA256 b487f57ae9d2abb1af2b14a7ca6cce2649a08a60a848f83c7faffa2b114827b9
MD5 9a47dd46bddc6613a0540e28ee1aa2e9
SHA1 347b1c5f30eae3f03c71e56d002d640ec8001f87
SHA512 498722e47a76ff1eb7bd1a94378a583a8637705f731bfa6fcb598ba2ca8cd3ce3a3fc1c31e15b2c4052f4881937a2f7bc84f8b86600a0308f027360f778e533c
TLSH
T1874103D8A9156397D1A83AF0E16FFC52340A300A28F6CEDF161A1712E7930452BD99EF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/MSVC/KeyGenExample.cpp

SHA256 afe251d9a3d1fc6bfda621e5752cf2fb176af3f279795aea113ad7dc2d03b3ea
MD5 8f65bfa347ea0a80eb5c2cd625a00e75
SHA1 fd152ab882dfebc20c92cc3e0626d9460cb0c857
SHA512 be8da4093fca8ccd1353dd471cf3da716a8fd9f13cba89408fe23dfe2f13e626e57d7702bd320b7ba391a575e3718a00da59591ce63a1d070f8d8f6ebc42509a
TLSH
T14D210895BD716019339534A46E02CD53758120154B78DF4EA1043EE1C7E68D5B3F53CF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/MSVC/KeyGenExample.sln

SHA256 8e69d2f41f26c31a136aa9c77bdcda7d1f302131dc9b8af161850aae03a28247
MD5 a007c2fb306f5d96204f0cc9645e6074
SHA1 e126a14d6d77640bdf94133848ef68a743a48d61
SHA512 8371506d31d889b0628c21e33ea2c8f4d43c5905a3fe262708b699e4cd965ddb162bf5d5184aa0081bf7bdec14831a040d8d106e262868337fb78a6a5d7617b6
TLSH
T170213B6C413E6CD250828ACFF0E94DF5AA770769825E24FC1CC1E479EB37786802B8C2
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/MSVC/KeyGenExample.vcproj

SHA256 5c8e2bb7e9656cc4a3002f7b66c9ac33276063e4a53926feb49235c0a68a2b91
MD5 609ebe26a0cfae492e08cd00914d6d22
SHA1 a1a70c0b76662e696e35c96a4dc31b21441e0121
SHA512 8df118711f913db950e2db26d3e045bd84577f82e38c7062f8c82c9a0a6381737a079cd66697d0c93e65a7e64b1e28a2c6b39c768318ba1de53d37c41690b1e5
SSDEEP 96:z+2ctakRskxuL2ksouX12VnPZRsN0uR2ksouSYFXsFBseE:zPctqkVBVoBP4NGBJXKBg
TLSH
T1DAD12B6C423C7CDD9191023E3A66040C1BDE3EAD101A12DBE6FFB950B5DDAA693265E3
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/MSVC/stdafx.cpp

SHA256 b37ba236f195671eca63ace1b176e20c59e464af1ebe58ffb7c477e11a3da55d
MD5 cfbe8f0079029186861cd00c01f6046c
SHA1 e236b362f578ee68a4858d27a7852231eae35b62
SHA512 384dd48eb83fbdc1d52ffe8a15fac0d72b4ca62fdd60e7bb25d535ae1914eeb3c987070241482d25fb7d0a53e878b18785a4dc36f9dfa266a34da8373bc76a20
TLSH
T14DE07D7BA54C64A180500090F64BE48B230AD114D3A48524400A234DF0175ABB9C39CB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/MSVC/stdafx.h

SHA256 2ff8b5a26b50161b55cacd8bf7dd7be1334c45c4d8fb65cd9eef3e7bd1a445a7
MD5 79ec29a088dae2489ce33f8381197a0e
SHA1 32eddf525d05e261fe541daa3ee2dde610958c96
SHA512 af300ad3a0d5d6bf551dde71e5f07a599416c51916187e0888f8d2ecba5a6030fe79b7aa28370c23a273c408da9cb7d1e2b89a7c6d0e8be2fd8cfe4ce8f08826
TLSH
T146D0A770D42C8192F21301A63207F637E30CBCCA5B04803D481670BAF1406C7614B7D4
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/MSVC/targetver.h

SHA256 fc2234ffe9ef11dd21941e07a4110157cd917ea0714c395edbfcbf97443acf5a
MD5 fcf175a16a84cd1374c9c7195208d377
SHA1 5f1aecad5863b24a7306a35e5a02a07bf1da51f7
SHA512 48ac7897fa947a0b3b57928036e5210a8c4c6a565a1188de1c31b8cabeb0c7298f1e7d8c8b1bbf0436344c935a4903abe59b21a0fdd7a2dda46607d9d21a356e
TLSH
T1100120422BD683E61BA119035BCEB3D64B2084FF1B5B935C70AE127063A3410132E2F6
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/KeyGen.cpp

SHA256 c767c6c407289422844fff9d1eb0391fc108e89c0f15dfd3854155cbbd5fb3e9
MD5 12b1ab5b3aa75cad6254e57eabcca5c3
SHA1 374746916f77be487854a68e18f26ef176f373a6
SHA512 70eb411b6b9ca564824884e0a661c11eb01100c676320cd045e5decf3af6fad027a36ba0b6207ca8e10c7983b44420cf1806a2f3fd9280b8d9d090804be8bb41
SSDEEP 192:xynGTLSvreauEgkdumQWgWIKUfDcMqPZg0akmLBVDZv:x9vSviauEgkdumQWZ7UAg0azLBVDZv
TLSH
T1C4F152C9ED71EB2B173625A08053D7427B4880B9A6D7CEC7A28C36552C939383F746DB
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/KeyGen.def

SHA256 d78e0def537358b1612a57ecf55c5beb5c9c8d3a21ff4e3021fae9496223c59c
MD5 fd9ca92357b0186c9439acd8316ee3e9
SHA1 39e3e5a0f6dcea4cf1634bfbe8c38dcfbf312853
SHA512 a678bdfd039bdeca0a3fa736cf56c67abb206220bf2d6bd9734920dcbc15bace11dfa43a5fed3d8e2c74d05d9a00de3b1eef445695f40f70399bb9ad5785e4e9
TLSH
T19FA00119001AA0BA4286ADA0492A8C6220A1004A80A8A4AA6148825AD3A386922D88AB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/KeyGen.rc

SHA256 7500d4f8ae96da1956fb6a1e31fddcd2badc991711a57e59684bfc2755a74470
MD5 86d83a28cbcbf70046c377e860717719
SHA1 2c9afb3254608861af82656524e69b2450ed1eb7
SHA512 5e0d7b2a21e0dab1352f86dc682a9e3b2d5a4d77730d65965360d169f7c708d4b4fb939a827c6a2babd0c04932a34e454486c9f5b5227eaffc7f0889b69eefa2
TLSH
T1A051C0534D005263182873F168047CDB626C8F5B9273846DF18FB598EF2BA6952CD9AF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/KeyGen.sln

SHA256 6223b030c5520e83f3892e3d94cb4f664a53b57b5d443ced2021c5c571671cb5
MD5 fc68fa6989b754092851e914cadd3db6
SHA1 c872c0f9bf86a8deccfa9e04088171a9bb52f2ce
SHA512 77148929fa27c4ee20dd8f3ff532d7ead75db499122f9c3cc5771af42d323d70192a3f0a3a8cce97b54c46472b9191160381174368f3fd6c5a3b71b229609bbf
TLSH
T11A21B578122F789694C5A98FD5EC8D69AB77428CC24C053D18F6908DBF3FA82511BE87
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/KeyGen.vcproj

SHA256 f494922a80489d71cb518204b8c9f4758d16269c7c97bce35cebfd7b269b62bd
MD5 f85952780cb8dfe3fcaca89dc6a6797f
SHA1 828099fdce0c81b7d81d8e29015e605216b4d467
SHA512 7f34f42fd5c95b52dc97f039614a841b18d7810efebbb2390dd1767525d6f9e4f2c968c579d29d82101471986500977eb563ae079f6e5b9016a9509d453ca421
SSDEEP 96:v+2ZYhRsbYuP+28YiRsAua12VsfGsj/up12VsfGs4iuSY6XsFEsFBsFysYE:vPZRbNP8kEo6Djmo6D4UXKEKBKyk
TLSH
T1F0F18B7C433C7DDDA190063E3A62140C1BAE3EBD100902EBE5FFB954B59DAA653265F2
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/KeyGenAPI.h

SHA256 bcfeda69f3d8a020dfd1ae839bc9ca2a1692a07ea0198f3420aca64de42bd628
MD5 3f62968d9d45fdc7abb70e9520e553c6
SHA1 d9e7bfe2e513f8a7e5058f77f67267733221b272
SHA512 6975ddb51dd6b82afbae74a01202c29d3d80b75038b91c6149b356a22dccdc08921ed15d0bdfe639905633a6fbf15ab8cb78a8a0ec5575230082f1e295f35eb5
TLSH
T1624104D8A915A357D1A83AF0E16FFC52340A300528F6CEDF161A1713E7530462BD99EF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/b64.cpp

SHA256 10477b6b117c0f07a295f15bb884c4932184a7c6f33a8280955e018e06daa6d2
MD5 7d2866dc3b05ba9b2f13f74eaba8e63b
SHA1 0af6484808e917513d77c08e2c7e39223b9e88ad
SHA512 352db4e317c8d9a3fa5314b5c2b73f13c3c558d30e3de534ab14fcbb260b5fbc478cde7524d46c97e8a2b7cf2dacec4b0db94c8933dc13f433e751857e29e798
TLSH
T1DD81CA1513E502B86097436AF7A7C94F223F21273645998C7A5FBD642FD69D033B1CE8
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/b64.h

SHA256 e7f44bcb282725de6122ad747a4b03c2ae661aa9430b5bb2fa818c453a3d5fe2
MD5 582185c39a66d0f2fbd310ce267d20c9
SHA1 cba4522e87d10793a615253f559394f099f113c2
SHA512 b637a52cbb3d8c51ced09d1f281e5df2e0bfdeba11da2013d693b7116dd48ec2a18c1d78b4205b2cf7681b582cf77f96ef555eb47b70f7fc991b1698b2dda5c7
TLSH
T124D05E4708A814C17DE10B95860748C9C139A3AE73E49BD91F9E73A8FC933A23666D1D
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/resource.h

SHA256 050ef8f797f6d4a79433c370e1ed8d29cf90cc3c012f64953cce9a8c7a3428a6
MD5 227c7463406bf19ecdac3fca4c3771d1
SHA1 94f41649302c46f663bf32efa8d5bbf43c744b13
SHA512 50b57247281bdec02fad913b7c21ce79367ecf541bc3e81f159edca64bc5604dd9ff3b49bafd4bd79fa4445f094fb39dc0f2b8b160fb4a156bfe2b0bcae3e1de
TLSH
T14FE092354D48E50349D5F0C6144524170B5DFE9BA2490A7F72CD64ECEF2A1A502DD18F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/sha-1.cpp

SHA256 fe8b5c0c656c628a98203af3ff4725fc78172e069b3b1214886dee32b3cd9791
MD5 77e3c2bab6fcbb1bf95ef8a59543bd4e
SHA1 fda1355822762d238d95c1fcca6e4339b4982f56
SHA512 7f4d52afb62c7cafcd9632098b73d4eaa9aeea0dc313678b2ea9f1b85164befbdc4014b2cc4067779b6b9dc8ddbdd3636705e7f78444aeb9b4cdc69da029172f
SSDEEP 192:GyClomH74mnMW0yPlcKuTlDuGka75TWGhha5iaJ0Pm4g6/p5x:GyClomH74mvPlcKuTlDzhxm4g6/p5x
TLSH
T12A22F12505B54E29625740B27B0630E72720E227A767E93EF06EA29C9FCC4D1C3E1FD9
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/sha-1.h

SHA256 3da74d0b5dcca8bd389332e6bdde2935ff54dcde9c28e3bce33fb9e26f0f0d0a
MD5 8dbdb4b873eb71ceacdda26ff3086713
SHA1 d06d098a3eb295313bed9be0d06aaffc9891c85c
SHA512 807166f289982035da058b85a2cc00a72d5004f1f5bdec02431b99013f20a91adfc49b81c4f38d02f7f60bc5f8ddca520271e9ca2bd76e8b239a7ae8a337e9c5
TLSH
T10831144728B47E67402B00B3176470C61605A24B2396B675F46F733D1F8EAD4A3A6EE0
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/sshbn.cpp

SHA256 08cea838a78e1fc4a9243049d8dfbb2232dd1169973b3255da363b9f698bfbe5
MD5 bd633e3156b693d6ded49457af6ca79b
SHA1 3e48b2ed9b5b8191598724acfe6e944e7263c7af
SHA512 4f16a329dbbd51dbe243d1e96818b9479baf28808d9ed4838df3c585f97b4361e59ef42da74a0d868e57f92a9ba785515e1b0b2ae581d5228a5163f5f54e65f9
SSDEEP 384:1ZAA1VpbQgx0Re0HQRirWZpFS7neDh1+QWZp4zWZ7hZ6BkvCyWZpRgiFUXqQHMkz:L5pofH5YS7nP8b2l7/JUzxQD
TLSH
T10BC2B9150EE361233713D13B6FA990647B2DB01F30E6E86AB82D42A52F1251553FBFA6
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/sshbn.h

SHA256 bacdc4009c045001b46e5d324848c39dfaf85e7512e14ff54425f1a811357b39
MD5 2cdd80d72b509f55a2fb8ecb62c42f12
SHA1 7c0ffe311c100b6237a9390ae9fbb8a2b5103d9c
SHA512 8c97e1d6f3d4b4d3c9f70b5380c8e949a33d47f2d4d2f93a1679cb84d71c8b030c0ca3dc9124049eb128c7053fe3dfe000e20af82632297a8f22ed56e0e60356
TLSH
T15D31A61E79505351079607B0A25598B9F50FB24E3CF632E2106FF34A1F1582DDAF7C84
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/stdafx.cpp

SHA256 9a1978dfd0c64abe90f85faec75a96dc5b35ac351e8b23b63781e40d41582fdb
MD5 2ccacd71fd20bfc0e1e22409454b5c1c
SHA1 3745e7943592904d41d992657f2a33574d014427
SHA512 a85ea475de62d0239991ac4a489ce779f160825d0287a55407826e032efa2485e74a20f8ea4c8461a4571b20e34f8111bdd6e1a154a0e03895545d7e22d07efd
TLSH
T110D0E77BEC4C64B080500090F347F4CB330ED110D3644524400A234DF0175ABBDC39CB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/DLL/Sources/stdafx.h

SHA256 d6307bb2a17d3a225f65eb04547abf177202391e5c88496245f1526865f10382
MD5 5d778bf18fd6d176190319bf811264c9
SHA1 4b9bf3609e79178f4d3df6205d8316fd6644f79e
SHA512 0140df04c2a5fcf72db05522a86a5a0dc259c9e61410f1482d1965e2926726318a98ed8638a56370b3bd44b70521dca8262f898f385915daeb13085803198100
TLSH
T1CAE048A5CD5C90A2D52714D1612A9119204DF5671B844067550B3DD4AC295E92DEF2FC
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/KeyGen/AlorithmRSA.cs

SHA256 9714fa2d00d035584c047b43682a06aa90fac5691c46073c7d523ecd5cc0b46c
MD5 dbf6bc67dcdcea22c3c6f1c8f1076c4f
SHA1 d5897fb82fc5e8be2bf1a5e5d4de5821e9d4f792
SHA512 1f92a2e62e3bd53fbafb8995c68fae6f28dedf50b29ee1ca151e62f5ecbebd15981835efaeee99e7dee33a72dfe5c474bd8e27896c6c365db5f11351d4155940
TLSH
T1F501AB24EF6C933A49C969857890DCD63B3B733455FD8C6B7C7E8BA8D08480152B8EA1
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/KeyGen/BigInteger.cs

SHA256 64fd136c2d8bfc0ef26c7ff74e6e466f40ea31ef209f5341b07ee017f061a420
MD5 1e4bbbb55b86b99675c5938e289d93eb
SHA1 0a047b8526c55a17b197b8771167b0e93dcaf939
SHA512 b72f1271fee9e18e79fc2ba190589f33eaf6ecaaceac3e6469ebfae0f00735fa29297223bfd2bb45a7ef81cbe20a15383d4b7de928fb7c65beb20a7ad5d6d311
SSDEEP 768:h5u7br4vOt0etw0cfMHAAHyoRWRgxiOUAfCYqSF7eLN4efeZv:h5c4vOt0etwMWRgx6XBLNUZv
TLSH
T138C374446B860E25155748294BDD68C27A24F52751DCE858BC0FB7F8AF8CE2523BC3FA
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/KeyGen/Generator.cs

SHA256 8ce22ed22cbaf4d943aeb42d85f4ca3c45fdf4ab3fefce7094285ddbf58bffbc
MD5 ef956be406fd60844eb2e5f29434d832
SHA1 7b9f6e2519d2c5a16dc8de487883fba5f5c0890f
SHA512 266edeb1489fc53479394c96de0ee598f9bda1f2e271be64a05469f1c2e2fddd93cca969c08d0e1a6901b4627e0597f01c1b000ca3d4e0bea06321bf24018a5e
SSDEEP 192:SjIrh4FBY1B/YYGZLbZGtXJTpyTf5sZfgBDZZDiyZkxgmosA2A2DgSyPH/oQGQd+:SUYYL6/Eh2jLGMs
TLSH
T16F024150EB2D16A5265620B652A1C18477BDD13383708CA6BC4C7E109FD8F1F6FB8B99
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/KeyGen/KeyGen.csproj

SHA256 739a377b5fad660fddae7d14287bcb3e49b5e74341b9d3a5f8ea10b8ca2fed62
MD5 5fb4275b796c5d16542737a6378a9793
SHA1 418963c485c8afc71ad90aef0ca459f161b0ec4d
SHA512 271b45dc6d36eefab1c5d2ae262be27dbdd3f591444109dd9ac5d4be473e66aecee2632fc751a442d120a976f450fc3971e04daa69f8d11252b66d8e5bbc17d9
TLSH
T1CF41CB24C2FC5BE792904533C1A5B9025FB4A3E328A0086DF66EE6190B97F581713BB7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/KeyGen/Properties/AssemblyInfo.cs

SHA256 681c06a01b1d543aea94183449fb90c795f40dadd6ad44bf8800aaa823f21d45
MD5 a4214f57bf8121b492bc934b27ae8550
SHA1 52f4c4444c8bdcfff595f87f73a1a5b504d212ef
SHA512 8a2da71b3f60987b4c20ed2d515ade4ad0e598c09e8b79f58afba5a27c642e2abef6e415859259d31da08e4932d6a4931094ba184b1ffddb02ae9d271db8b471
TLSH
T166217A217345B37E0F520153AEAF7585437C537CD2EA4D4A28BC6823F742B3812A6AB7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/KeyGen/app.config

SHA256 8ce97e495ddf5fb08d6c895e40184df6594dcec005fe95c8abacdccafe36fe93
MD5 96aeedce7e599e68df3f1048b24789b1
SHA1 988800d88a06a0b014238d347ba1b5d74de2ee56
SHA512 d3c5d107d0573f02c1f6de15d0e19ce93fb4954918946cbbef9118c63df606f1d9b550b0ae273e0829c8b43ddce10bf703923d72b03d067843e1c70b0c2eaa3e
TLSH
T193A002C6561D9D232C424F67D6A806051EB10785C45A100CE46F7F644A0554C430A286
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/KeyGenNet.sln

SHA256 7826e11ef69db1dd6f2f765f5464dbea422a9f7d17ba3eac444c71af02615ae1
MD5 a9d6e8714c7262668273b66c6824d818
SHA1 53809bb2505cd67216cbd491e2693e6e2244787f
SHA512 3cfd8c976543b53dbb87a868b06ebcd184a615729d03aa573c78382c07a88e68bb87a5dc380f25c20f1dfdde6375d4d916a47a2ac736b17d5a42c68231c7bff7
TLSH
T1653129A812085EF2E6C217DAD2927CC7B53B41A4411B4D39144E907C5A2FFA5367B68F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/Usage/Program.cs

SHA256 5f420d801267c454f13ce9d48fee3d1c438fa633fc9fa4ef962f50d275b60409
MD5 86e3df5c78ced11272decfbfb56655d3
SHA1 3d03e3cca02a40443636a9f2243ca842bb78dab7
SHA512 c85969943e295d3b9ee1111c7249043223d4912ee7ab10c7b27bb8ea83ec10dd3c0a98ffdb67b2e87c1997d26e9c0cefa2116e041d5f3a54ca72e67297345637
TLSH
T1E311C0161BA747A85053B5575B179C002935A6178B55C863B98E48079F44D4C3EB867C
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/Usage/Properties/AssemblyInfo.cs

SHA256 bac8c82d83170d2f4e692d22f9cd0202b9d6fe8388d866bac1de5a5f3f2ddce6
MD5 d8f5a833ebf9ba24d30c0faf9433d625
SHA1 1f2fd1cfc68b1d8b3e28b2f43541c75553957d7a
SHA512 e2894696be70c2164a9804c7e41ee821a236296104b72ef6b367d6213bfccb459fb52379aa7a2ed04dcec9b6ad24596edba436c894cecdb00a92c45b6466c588
TLSH
T117217A252745A37E0F510053BEAF7585437C632CD2EA0D4524BD6473F601B3402A9ABB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/Usage/Usage.csproj

SHA256 ee99446de5b84e56f87cdb15f64a6da94417752334f00521f87874456fcaa91b
MD5 ed81c25fc3ace0f8394c1c2083dd0a91
SHA1 773c2cb8fd9035347a180747ea17e15b6ab81d08
SHA512 dddc9c7daafbddbf01273ee607eb6541663b6cf73c41bc25c23e727ff933f36318eb56da2e55e22159b1d57f957be528917e229d8d145e5361bca0b282e68e58
TLSH
T17941EE30D2FC1AE79250453281617A464FB8A3E338A044ACF7AEE50D0B53F992653BB7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/Net/Usage/app.config

SHA256 c05502941d829d7135077a747e53caaebfe71629424625f613f34ecaf96a6dae
MD5 3ef462e33f022a9316fd79c496aa9a35
SHA1 fc94921eeebb48b33db0f51ccdef2008e22be823
SHA512 51ad6f101238dcd33a334ee5264e6a2a210f80bc0afe4e1c1e9483eec8a993d78174631efd826a41d00430c677140a77e6cc0663bdf1fe7a50cac0c140f4db71
TLSH
T11AB092964628A82B2C121F53575406451FB902929168400CE0DF3F10160118E931A386
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/KeyGen/PHP/keygen.php

SHA256 e9107bded739c19d73ecda661ee9f5446ee0659a086f692cffe894dcd65be66a
MD5 936592aef3f9d75e6c240220e079b959
SHA1 6f2cb5d65311e8f08301e431b2093eda615e3c6b
SHA512 2c7ef2a5a2c8f839fb08507eef6e70cb86018a46e3987df89c3f3a0e9f954537aa4da4dda36ff95347474301775ea00cdc433c6a06c3b865258a3173c9c5e134
SSDEEP 96:eL9gL+TS8jiPiRT41h1scEhVugZKWQxvrbstasxszisVGetPuiQ3rADgBy0:jSpRvNZKWu3sIeNstxQ3rI50
TLSH
T17AF13219DFA9F39351EA2474BD4AC50AEBF8203336140881399AF59CD1ECE3867B9C4D
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/TestApp.cbproj

SHA256 26a5894c335575bdfd4a7d708ca6284cbf1c84b2b91f1f23b3726db118abeb03
MD5 a74af87352bf3822fc251c16f993f8d6
SHA1 80cb1e2ed130b3956ef2c00888b43ab6a8b1ae6f
SHA512 7d6fabfc919a0272b8f1cad52f0e47d6e4a0ca7fe8988451b23f9f00a13b0d1f3aa35cc029a3bdd419b18b23964ff0a3f46723073249af571b793a2d752a2572
SSDEEP 384:6DKpOtfvDIEQNq+B6U2yq6Uaj/BNU9KaH+825vVokldkGi:6iOtfvekGi
TLSH
T1DE52425184F419B616CE4B7A5F0278419E7253AB21FECC5CFBCF66A49F6260C1043AB6
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/TestApp.cpp

SHA256 635a8524101353d40d26e9e1f6a35bd81dc40c3c292becba583f5f4b07535e37
MD5 ac911a90497709655c79b5391b63c682
SHA1 5be1a8dca83c4835392e7dd1fd8e4d9e5eecf16c
SHA512 e81d1f96cde1c2e923b50f85eb7613c4eada3aec14c128906039823f5ecb2128277956ba4c7a7108ef0cd27fa637170801997d70f19687dde2ad2047df4ce063
TLSH
T14A01C29BDD598863D1E7D9BA133491C0C2AFEBBE6FD50823B284511860C012AC51FB43
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/TestApp.exe

IMPHASH 26e7fb27c5c9cdac46ddac5efe7e2eda
SHA256 9913225feda352d3662c6a2498ccbe3da39fe0a5abb899f31aa7ea8bfbb99fd4
MD5 fcc37089f845116c7d2dd21fe9f86665
SHA1 8db3fd7a998cea640d0904ebf0547a8deedca2f5
SHA512 590d9d56ee520a2c22e0c7e2a22d6d604732c5ef77de398eafe27ff0aae97ad5929906d4f95ec5702b4c89f6d26266386ddaf75f53b0adc826e3aebab3afe8d9
SSDEEP 3072:s+YK1ZJCQSMbhoRVw2EVYv6VYi1p15QVx:v+QSMQVNEVYvSYeQ
TLSH
T1A0B32820FF588067F466C179272DBE50F1AD3A326091E21E7FE56F8868B50B563D920F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

7936

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

rtl190.bpl

@System@initialization$qqrv @System@Finalization$qqrv @System@UTF8ToUnicodeString$qqrpxc @System@FreeMemory$qpv @System@@CheckAutoResult$qqrl @System@UnregisterModule$qqrp17System@TLibModule @System@RegisterModule$qqrp17System@TLibModule @System@FindHInstance$qqrpv @System@@DynArrayRelease$qqrpv @System@@DynArrayAddRef$qqrpv @System@SetAnsiString$qqrp27System@%AnsiStringT$us$i0$%pbius @System@@UStrFromLStr$qqrr20System@UnicodeStringx27System@%AnsiStringT$us$i0$% @System@@UStrFromPChar$qqrr20System@UnicodeStringpc @System@@WStrFromLStr$qqrr17System@WideStringx27System@%AnsiStringT$us$i0$% @System@@LStrFromUStr$qqrr27System@%AnsiStringT$us$i0$%x20System@UnicodeStringus @System@@LStrSetLength$qqrr27System@%AnsiStringT$us$i0$%ius @System@@LStrInsert$qqrx27System@%AnsiStringT$us$i0$%r27System@%AnsiStringT$us$i0$%i @System@@LStrDelete$qqrr27System@%AnsiStringT$us$i0$%ii @System@@LStrCmp$qqrv @System@@LStrCat3$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$%t2 @System@@LStrCat$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$% @System@@LStrFromWStr$qqrr27System@%AnsiStringT$us$i0$%x17System@WideStringus @System@@LStrFromArray$qqrr27System@%AnsiStringT$us$i0$%pcius @System@@LStrFromPChar$qqrr27System@%AnsiStringT$us$i0$%pcus @System@@LStrFromWChar$qqrr27System@%AnsiStringT$us$i0$%bus @System@@LStrAsg$qqrr27System@%AnsiStringT$us$i0$%x27System@%AnsiStringT$us$i0$% @System@@UStrAsg$qqrr20System@UnicodeStringx20System@UnicodeString @System@@LStrFromPWCharLen$qqrr27System@%AnsiStringT$us$i0$%pbius @System@@LStrClr$qqrpv @System@@UStrClr$qqrpv @System@@HandleFinally$qqrv @System@TObject@MethodName$qqrpv @System@TObject@MethodAddress$qqrx20System@UnicodeString @System@TObject@MethodAddress$qqrrx28System@%SmallString$iuc$255% @System@TObject@Dispatch$qqrpv @System@TObject@ToString$qqrv @System@TObject@ClassInfo$qqrv @System@TObject@InheritsFrom$qqrp17System@TMetaClass @System@@FindDynaInst$qqrxp14System@TObjects @System@TObject@UnitScope$qqrv @System@TObject@UnitName$qqrv @System@TObject@GetInterfaceTable$qqrv @System@TObject@GetInterfaceEntry$qqrrx5_GUID @System@TObject@GetHashCode$qqrv @System@TObject@Equals$qqrp14System@TObject @System@TObject@InitInstance$qqrpv @System@TObject@$bdtr$qqrv @System@TObject@InstanceSize$qqrv @System@TObject@FreeInstance$qqrv @System@TObject@NewInstance$qqrv @System@TObject@ClassParent$qqrv @System@TObject@ClassNameIs$qqrx20System@UnicodeString @System@TObject@QualifiedClassName$qqrv @System@TObject@ClassName$qqrv @System@Set8087CW$qqrus @System@Reset8087CW$qqrv @System@SetRaiseList$qqrpv @System@RaiseList$qqrv @System@IsMemoryManagerSet$qqrv @System@SetMemoryManager$qqrrx23System@TMemoryManagerEx @System@DefaultSystemCodePage @System@IsMultiThread @System@IsConsole @System@ExitProc @System@CmdLine @System@IsLibrary @System@MainInstance @System@ExceptionAcquired @System@RaiseExceptObjProc @System@ExceptObjProc @System@Types@initialization$qqrv @System@Types@Finalization$qqrv @System@Uitypes@initialization$qqrv @System@Uitypes@Finalization$qqrv @System@Sysconst@initialization$qqrv @System@Sysconst@Finalization$qqrv @System@Internal@Excutils@initialization$qqrv @System@Internal@Excutils@Finalization$qqrv @System@Rtlconsts@initialization$qqrv @System@Rtlconsts@Finalization$qqrv @System@Character@initialization$qqrv @System@Character@Finalization$qqrv @Winapi@Shfolder@initialization$qqrv @Winapi@Shfolder@Finalization$qqrv @Winapi@Imagehlp@initialization$qqrv @Winapi@Imagehlp@Finalization$qqrv @System@Sysutils@initialization$qqrv @System@Sysutils@Finalization$qqrv @System@Sysutils@TOSVersion@$bcctr$qqrv @System@Sysutils@TEncoding@$bcdtr$qqrv @System@Sysutils@TLanguages@$bcdtr$qqrv @System@Sysutils@Exception@$bcdtr$qqrv @System@Sysutils@Exception@$bcctr$qqrv @System@Sysutils@Exception@$bdtr$qqrv @System@Sysutils@Exception@$bctr$qqrx20System@UnicodeString @System@Sysutils@Format$qqrx20System@UnicodeStringpx14System@TVarRecxi @System@Sysutils@ExtractFileName$qqrx20System@UnicodeString @System@Sysutils@TOSVersion@$bcdtr$qqrv @System@Sysutils@TEncoding@$bcctr$qqrv @System@Sysutils@Exception@ @System@Sysutils@TLanguages@$bcctr$qqrv @System@Math@initialization$qqrv @System@Math@Finalization$qqrv @System@Timespan@initialization$qqrv @System@Timespan@Finalization$qqrv @System@Timespan@TTimeSpan@$bcctr$qqrv @System@Timespan@TTimeSpan@$bcdtr$qqrv @System@Varutils@initialization$qqrv @System@Varutils@Finalization$qqrv @System@Variants@initialization$qqrv @System@Variants@Finalization$qqrv @System@Strutils@initialization$qqrv @System@Strutils@Finalization$qqrv @System@Ansistrings@initialization$qqrv @System@Ansistrings@Finalization$qqrv @System@Rtti@initialization$qqrv @System@Rtti@Finalization$qqrv @System@Typinfo@initialization$qqrv @System@Typinfo@Finalization$qqrv @System@Generics@Defaults@initialization$qqrv @System@Generics@Defaults@Finalization$qqrv @System@Generics@Defaults@TIStringComparer@$bcdtr$qqrv @System@Generics@Defaults@TStringComparer@$bcdtr$qqrv @System@Generics@Defaults@TIStringComparer@$bcctr$qqrv @System@Generics@Defaults@TStringComparer@$bcctr$qqrv @System@Diagnostics@initialization$qqrv @System@Diagnostics@Finalization$qqrv @System@Syncobjs@initialization$qqrv @System@Syncobjs@Finalization$qqrv @System@Syncobjs@TInterlocked@Increment$qqrri @System@Generics@Collections@initialization$qqrv @System@Generics@Collections@Finalization$qqrv @System@Classes@initialization$qqrv @System@Classes@Finalization$qqrv @System@Classes@TObserverMapping@$bcdtr$qqrv @System@Classes@TLoginCredentialService@$bcdtr$qqrv @System@Classes@TLoginCredentialService@$bcctr$qqrv @System@Classes@TBinaryWriter@$bcdtr$qqrv @System@Classes@TComponent@UpdateRegistry$qqrox20System@UnicodeStringt2 @System@Classes@TComponent@SafeCallException$qqrp14System@TObjectpv @System@Classes@TComponent@ObserverAdded$qqrxix52System@%DelphiInterface$t24System@Classes@IObserver% @System@Classes@TComponent@CanObserve$qqrxi @System@Classes@TComponent@UpdateAction$qqrp27System@Classes@TBasicAction @System@Classes@TComponent@GetObservers$qqrv @System@Classes@TComponent@$bcctr$qqrv @System@Classes@TComponent@WriteState$qqrp22System@Classes@TWriter @System@Classes@TComponent@$bdtr$qqrv @System@Classes@TThread@$bcdtr$qqrv @System@Classes@TThread@$bcctr$qqrv @System@Classes@TStrings@EndUpdate$qqrv @System@Classes@TStrings@BeginUpdate$qqrv @System@Classes@TPersistent@Assign$qqrp26System@Classes@TPersistent @System@Classes@TPersistent@$bdtr$qqrv @System@Classes@TBinaryWriter@$bcctr$qqrv @System@Classes@TComponent@$bcdtr$qqrv @System@Classes@TObserverMapping@$bcctr$qqrv @System@Uiconsts@initialization$qqrv @System@Uiconsts@Finalization$qqrv @System@Actions@initialization$qqrv @System@Actions@Finalization$qqrv @System@Win@Comconst@initialization$qqrv @System@Win@Comconst@Finalization$qqrv @System@Win@Comobj@initialization$qqrv @System@Win@Comobj@Finalization$qqrv @System@Win@Comobj@TComServerObject@$bcctr$qqrv @System@Win@Comobj@TComServerObject@$bcdtr$qqrv @System@Contnrs@initialization$qqrv @System@Contnrs@Finalization$qqrv @System@Dateutils@initialization$qqrv @System@Dateutils@Finalization$qqrv @System@Dateutils@TTimeZone@$bcdtr$qqrv @System@Dateutils@TTimeZone@$bcctr$qqrv @System@Masks@initialization$qqrv @System@Masks@Finalization$qqrv @System@Ioutils@initialization$qqrv @System@Ioutils@Finalization$qqrv @System@Ioutils@TPath@$bcctr$qqrv @System@Ioutils@TPath@$bcdtr$qqrv @System@Inifiles@initialization$qqrv @System@Inifiles@Finalization$qqrv @System@Win@Registry@initialization$qqrv @System@Win@Registry@Finalization$qqrv @System@Win@Registry@TRegistry@$bcctr$qqrv @System@Win@Registry@TRegistry@$bcdtr$qqrv @System@Helpintfs@initialization$qqrv @System@Helpintfs@Finalization$qqrv @Winapi@Msxmlintf@initialization$qqrv @Winapi@Msxmlintf@Finalization$qqrv @Winapi@Uxtheme@initialization$qqrv @Winapi@Uxtheme@Finalization$qqrv @Winapi@Flatsb@initialization$qqrv @Winapi@Flatsb@Finalization$qqrv @Winapi@Multimon@initialization$qqrv @Winapi@Multimon@Finalization$qqrv @System@Widestrutils@initialization$qqrv @System@Widestrutils@Finalization$qqrv @System@Zlib@initialization$qqrv @System@Zlib@Finalization$qqrv @System@Internal@Debugutils@initialization$qqrv @System@Internal@Debugutils@Finalization$qqrv @System@Internal@Debugutils@TDebugUtils@$bcdtr$qqrv @System@Internal@Debugutils@TDebugUtils@$bcctr$qqrv @Winapi@Wincodec@initialization$qqrv @Winapi@Wincodec@Finalization$qqrv

vcl190.bpl

@Vcl@Consts@initialization$qqrv @Vcl@Consts@Finalization$qqrv @Vcl@Graphics@initialization$qqrv @Vcl@Graphics@Finalization$qqrv @Vcl@Graphutil@initialization$qqrv @Vcl@Graphutil@Finalization$qqrv @Vcl@Toolwin@initialization$qqrv @Vcl@Toolwin@Finalization$qqrv @Vcl@Printers@initialization$qqrv @Vcl@Printers@Finalization$qqrv @Vcl@Stdactns@initialization$qqrv @Vcl@Stdactns@Finalization$qqrv @Vcl@Comstrs@initialization$qqrv @Vcl@Comstrs@Finalization$qqrv @Vcl@Extctrls@initialization$qqrv @Vcl@Extctrls@Finalization$qqrv @Vcl@Extctrls@TLinkLabel@$bcdtr$qqrv @Vcl@Extctrls@TLinkLabel@$bcctr$qqrv @Vcl@Extctrls@TCustomLinkLabel@$bcdtr$qqrv @Vcl@Extctrls@TCustomLinkLabel@$bcctr$qqrv @Vcl@Extctrls@TCategoryPanelGroup@$bcdtr$qqrv @Vcl@Extctrls@TCategoryPanelGroup@$bcctr$qqrv @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcdtr$qqrv @Vcl@Extctrls@TCustomCategoryPanelGroup@$bcctr$qqrv @Vcl@Stdctrls@initialization$qqrv @Vcl@Stdctrls@Finalization$qqrv @Vcl@Stdctrls@TStaticText@$bcdtr$qqrv @Vcl@Stdctrls@TStaticText@$bcctr$qqrv @Vcl@Stdctrls@TListBox@$bcdtr$qqrv @Vcl@Stdctrls@TListBox@$bcctr$qqrv @Vcl@Stdctrls@TCheckBox@$bcdtr$qqrv @Vcl@Stdctrls@TCheckBox@$bcctr$qqrv @Vcl@Stdctrls@TButton@$bcdtr$qqrv @Vcl@Stdctrls@TButton@$bcctr$qqrv @Vcl@Stdctrls@TComboBox@$bcdtr$qqrv @Vcl@Stdctrls@TComboBox@$bcctr$qqrv @Vcl@Stdctrls@TMemo@$bcdtr$qqrv @Vcl@Stdctrls@TMemo@$bcctr$qqrv @Vcl@Stdctrls@TEdit@$bcdtr$qqrv @Vcl@Stdctrls@TEdit@$bcctr$qqrv @Vcl@Stdctrls@TGroupBox@$bcdtr$qqrv @Vcl@Stdctrls@TGroupBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomStaticText@$bcdtr$qqrv @Vcl@Stdctrls@TCustomStaticText@$bcctr$qqrv @Vcl@Stdctrls@TScrollBar@$bcdtr$qqrv @Vcl@Stdctrls@TScrollBar@$bcctr$qqrv @Vcl@Stdctrls@TCustomListBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomListBox@$bcctr$qqrv @Vcl@Stdctrls@TRadioButton@$bcdtr$qqrv @Vcl@Stdctrls@TRadioButton@$bcctr$qqrv @Vcl@Stdctrls@TCustomCheckBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomCheckBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomButton@$bcdtr$qqrv @Vcl@Stdctrls@TCustomButton@$bcctr$qqrv @Vcl@Stdctrls@TCustomComboBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomComboBox@$bcctr$qqrv @Vcl@Stdctrls@TCustomMemo@$bcdtr$qqrv @Vcl@Stdctrls@TCustomMemo@$bcctr$qqrv @Vcl@Stdctrls@TCustomEdit@$bcdtr$qqrv @Vcl@Stdctrls@TCustomEdit@$bcctr$qqrv @Vcl@Stdctrls@TCustomGroupBox@$bcdtr$qqrv @Vcl@Stdctrls@TCustomGroupBox@$bcctr$qqrv @Vcl@Stdctrls@TButton@ @Vcl@Stdctrls@TMemo@ @Vcl@Stdctrls@TEdit@ @Vcl@Stdctrls@TLabel@ @Vcl@Listactns@initialization$qqrv @Vcl@Listactns@Finalization$qqrv @Vcl@Comctrls@initialization$qqrv @Vcl@Comctrls@Finalization$qqrv @Vcl@Comctrls@THeaderControl@$bcdtr$qqrv @Vcl@Comctrls@THeaderControl@$bcctr$qqrv @Vcl@Comctrls@TStatusBar@$bcdtr$qqrv @Vcl@Comctrls@TStatusBar@$bcctr$qqrv @Vcl@Comctrls@TComboBoxEx@$bcdtr$qqrv @Vcl@Comctrls@TComboBoxEx@$bcctr$qqrv @Vcl@Comctrls@TCustomComboBoxEx@$bcdtr$qqrv @Vcl@Comctrls@TCustomComboBoxEx@$bcctr$qqrv @Vcl@Comctrls@TPageScroller@$bcdtr$qqrv @Vcl@Comctrls@TPageScroller@$bcctr$qqrv @Vcl@Comctrls@TDateTimePicker@$bcdtr$qqrv @Vcl@Comctrls@TDateTimePicker@$bcctr$qqrv @Vcl@Comctrls@TCoolBar@$bcdtr$qqrv @Vcl@Comctrls@TCoolBar@$bcctr$qqrv @Vcl@Comctrls@TToolBar@$bcdtr$qqrv @Vcl@Comctrls@TToolBar@$bcctr$qqrv @Vcl@Comctrls@TListView@$bcdtr$qqrv @Vcl@Comctrls@TListView@$bcctr$qqrv @Vcl@Comctrls@TCustomListView@$bcdtr$qqrv @Vcl@Comctrls@TCustomListView@$bcctr$qqrv @Vcl@Comctrls@THotKey@$bcdtr$qqrv @Vcl@Comctrls@THotKey@$bcctr$qqrv @Vcl@Comctrls@TCustomHotKey@$bcdtr$qqrv @Vcl@Comctrls@TCustomHotKey@$bcctr$qqrv @Vcl@Comctrls@TUpDown@$bcdtr$qqrv @Vcl@Comctrls@TUpDown@$bcctr$qqrv @Vcl@Comctrls@TCustomUpDown@$bcdtr$qqrv @Vcl@Comctrls@TCustomUpDown@$bcctr$qqrv @Vcl@Comctrls@TRichEdit@$bcdtr$qqrv @Vcl@Comctrls@TRichEdit@$bcctr$qqrv @Vcl@Comctrls@TCustomRichEdit@$bcdtr$qqrv @Vcl@Comctrls@TCustomRichEdit@$bcctr$qqrv @Vcl@Comctrls@TProgressBar@$bcdtr$qqrv @Vcl@Comctrls@TProgressBar@$bcctr$qqrv @Vcl@Comctrls@TTrackBar@$bcdtr$qqrv @Vcl@Comctrls@TTrackBar@$bcctr$qqrv @Vcl@Comctrls@TTreeView@$bcdtr$qqrv @Vcl@Comctrls@TTreeView@$bcctr$qqrv @Vcl@Comctrls@TCustomTreeView@$bcdtr$qqrv @Vcl@Comctrls@TCustomTreeView@$bcctr$qqrv @Vcl@Comctrls@TCustomHeaderControl@$bcdtr$qqrv @Vcl@Comctrls@TCustomHeaderControl@$bcctr$qqrv @Vcl@Comctrls@TCustomStatusBar@$bcdtr$qqrv @Vcl@Comctrls@TCustomStatusBar@$bcctr$qqrv @Vcl@Comctrls@TTabControl@$bcdtr$qqrv @Vcl@Comctrls@TTabControl@$bcctr$qqrv @Vcl@Comctrls@TCustomTabControl@$bcdtr$qqrv @Vcl@Comctrls@TCustomTabControl@$bcctr$qqrv @Vcl@Dialogs@initialization$qqrv @Vcl@Dialogs@Finalization$qqrv @Vcl@Menus@initialization$qqrv @Vcl@Menus@Finalization$qqrv @Vcl@Imglist@initialization$qqrv @Vcl@Imglist@Finalization$qqrv @Vcl@Actnlist@initialization$qqrv @Vcl@Actnlist@Finalization$qqrv @Vcl@Controls@initialization$qqrv @Vcl@Controls@Finalization$qqrv @Vcl@Controls@TWinControl@UpdateControlOriginalParentSize$qqrp21Vcl@Controls@TControlr19System@Types@TPoint @Vcl@Controls@TWinControl@UpdateTIPStatus$qqrv @Vcl@Controls@TWinControl@DockReplaceDockClient$qqrp21Vcl@Controls@TControlp24Vcl@Controls@TWinControlt119Vcl@Controls@TAlignt1 @Vcl@Controls@TWinControl@SetParentBackground$qqro @Vcl@Controls@TWinControl@CanAutoSize$qqrrit1 @Vcl@Controls@TWinControl@AssignTo$qqrp26System@Classes@TPersistent @Vcl@Controls@TWinControl@UpdateStyleElements$qqrv @Vcl@Controls@TWinControl@ConstrainedResize$qqrrit1t1t1 @Vcl@Controls@TWinControl@CanResize$qqrrit1 @Vcl@Controls@TWinControl@GetClientOrigin$qqrv @Vcl@Controls@TWinControl@GetControlExtents$qqrv @Vcl@Controls@TWinControl@Repaint$qqrv @Vcl@Controls@TWinControl@Update$qqrv @Vcl@Controls@TWinControl@Invalidate$qqrv @Vcl@Controls@TWinControl@GetDeviceContext$qqrrp6HWND__ @Vcl@Controls@TWinControl@ShowControl$qqrp21Vcl@Controls@TControl @Vcl@Controls@TWinControl@SetBounds$qqriiii @Vcl@Controls@TWinControl@SetParentDoubleBuffered$qqro @Vcl@Controls@TWinControl@CustomAlignPosition$qqrp21Vcl@Controls@TControlrit2t2t2r18System@Types@TRectrx23Vcl@Controls@TAlignInfo @Vcl@Controls@TWinControl@CustomAlignInsertBefore$qqrp21Vcl@Controls@TControlt1 @Vcl@Controls@TWinControl@CreateHandle$qqrv @Vcl@Controls@TWinControl@DestroyWnd$qqrv @Vcl@Controls@TWinControl@$bdtr$qqrv @Vcl@Controls@TControl@InitiateAction$qqrv @Vcl@Controls@TControl@GetFloatingDockSiteClass$qqrv @Vcl@Controls@TControl@CreateTouchManager$qqrv @Vcl@Controls@TControl@SetBiDiMode$qqr24System@Classes@TBiDiMode @Vcl@Controls@TControl@SetText$qqrx20System@UnicodeString @Vcl@Controls@TControl@GetText$qqrv @Vcl@Controls@TControl@SetEnabled$qqro @Vcl@Controls@TControl@SetName$qqrx20System@UnicodeString @Vcl@Controls@TControl@SetAutoSize$qqro @Vcl@Controls@TControl@SetDragMode$qqr24System@Uitypes@TDragMode @Vcl@Controls@TControl@GetAction$qqrv @Vcl@Controls@TControl@GetEnabled$qqrv @Vcl@Controls@TControl@GetDragImages$qqrv @Vcl@Controls@TControl@$bdtr$qqrv @Vcl@Themes@initialization$qqrv @Vcl@Themes@Finalization$qqrv @Vcl@Themes@TCustomStyleEngine@$bcdtr$qqrv @Vcl@Themes@TCustomStyleEngine@$bcctr$qqrv @Vcl@Forms@initialization$qqrv @Vcl@Forms@Finalization$qqrv @Vcl@Forms@TApplication@SetMainFormOnTaskBar$qqrxo @Vcl@Forms@TApplication@GetExeName$qqrv @Vcl@Forms@TApplication@ShowException$qqrp25System@Sysutils@Exception @Vcl@Forms@TApplication@MessageBox$qqrpxbt1i @Vcl@Forms@TApplication@Run$qqrv @Vcl@Forms@TApplication@CreateForm$qqrp17System@TMetaClasspv @Vcl@Forms@TApplication@Initialize$qqrv @Vcl@Forms@TForm@$bcdtr$qqrv @Vcl@Forms@TForm@$bcctr$qqrv @Vcl@Forms@TCustomForm@QueryInterface$qqsrx5_GUIDpv @Vcl@Forms@TCustomForm@RequestAlign$qqrv @Vcl@Forms@TCustomForm@UpdateActions$qqrv @Vcl@Forms@TCustomForm@ShowModal$qqrv @Vcl@Forms@TCustomForm@SetFocus$qqrv @Vcl@Forms@TCustomForm@CloseQuery$qqrv @Vcl@Forms@TCustomForm@Close$qqrv @Vcl@Forms@TCustomForm@Resizing$qqr27System@Uitypes@TWindowState @Vcl@Forms@TCustomForm@PaintWindow$qqrp5HDC__ @Vcl@Forms@TCustomForm@SetFocusedControl$qqrp24Vcl@Controls@TWinControl @Vcl@Forms@TCustomForm@DefaultHandler$qqrpv @Vcl@Forms@TCustomForm@DestroyWindowHandle$qqrv @Vcl@Forms@TCustomForm@DestroyHandle$qqrv @Vcl@Forms@TCustomForm@CreateWindowHandle$qqrrx26Vcl@Controls@TCreateParams @Vcl@Forms@TCustomForm@CreateWnd$qqrv @Vcl@Forms@TCustomForm@CreateParams$qqrr26Vcl@Controls@TCreateParams @Vcl@Forms@TCustomForm@AlignControls$qqrp21Vcl@Controls@TControlr18System@Types@TRect @Vcl@Forms@TCustomForm@ClientWndProc$qqrr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@WndProc$qqrr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@ValidateRename$qqrp25System@Classes@TComponentx20System@UnicodeStringt2 @Vcl@Forms@TCustomForm@SetParent$qqrp24Vcl@Controls@TWinControl @Vcl@Forms@TCustomForm@WantChildKey$qqrp21Vcl@Controls@TControlr24Winapi@Messages@TMessage @Vcl@Forms@TCustomForm@SetParentBiDiMode$qqro @Vcl@Forms@TCustomForm@GetFloating$qqrv @Vcl@Forms@TCustomForm@GetClientRect$qqrv @Vcl@Forms@TCustomForm@DefineProperties$qqrp21System@Classes@TFiler @Vcl@Forms@TCustomForm@ReadState$qqrp22System@Classes@TReader @Vcl@Forms@TCustomForm@Notification$qqrp25System@Classes@TComponent25System@Classes@TOperation @Vcl@Forms@TCustomForm@Loaded$qqrv @Vcl@Forms@TCustomForm@DoDestroy$qqrv @Vcl@Forms@TCustomForm@DoCreate$qqrv @Vcl@Forms@TCustomForm@$bdtr$qqrv @Vcl@Forms@TCustomForm@BeforeDestruction$qqrv @Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponenti @Vcl@Forms@TCustomForm@AfterConstruction$qqrv @Vcl@Forms@TCustomForm@$bcdtr$qqrv @Vcl@Forms@TCustomForm@$bctr$qqrp25System@Classes@TComponent @Vcl@Forms@TCustomForm@$bcctr$qqrv @Vcl@Forms@TScrollBox@$bcdtr$qqrv @Vcl@Forms@TScrollBox@$bcctr$qqrv @Vcl@Forms@TScrollingWinControl@AdjustClientRect$qqrr18System@Types@TRect @Vcl@Forms@TScrollingWinControl@AutoScrollInView$qqrp21Vcl@Controls@TControl @Vcl@Forms@TScrollingWinControl@DoGetGestureOptions$qqrr60System@%Set$t32Vcl@Controls@TInteractiveGesture$iuc$0$iuc$4%r66System@%Set$t38Vcl@Controls@TInteractiveGestureOption$iuc$0$iuc$4% @Vcl@Forms@TScrollingWinControl@DoGesture$qqrrx30Vcl@Controls@TGestureEventInforo @Vcl@Forms@TScrollingWinControl@AutoScrollEnabled$qqrv @Vcl@Forms@TScrollingWinControl@$bdtr$qqrv @Vcl@Forms@Application @$xp$15Vcl@Forms@TForm @Vcl@Forms@TForm@ @Vcl@Clipbrd@initialization$qqrv @Vcl@Clipbrd@Finalization$qqrv

borlndmm

GetAllocMemCount

kernel32

FreeLibrary GetCommandLineW GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetVersionExW HeapAlloc HeapFree InterlockedExchange LoadLibraryA LocalAlloc LocalFree RaiseException

cc32140mt

@$bdele$qpv @$bdla$qpv @$bnwa$qui @_CatchCleanup$qv @_InitTermAndUnexPtrs$qv @_ReThrowException$quipuc @_ThrowExceptionLDTC$qpvt1t1t1uiuiuipuct1 @__exceptionAcquired @setExceptionFuncAddr$qpqp17_EXCEPTION_RECORDpp4tpid$pvppqqrp17_EXCEPTION_RECORD$v @setRaiseListFuncAddr$qpvt1 __ErrorExit ___CRTL_MEM_GetBorMemPtrs ___CRTL_MEM_UseBorMM ___CRTL_TLS_Alloc ___CRTL_TLS_ExitThread ___CRTL_TLS_Free ___CRTL_TLS_GetValue ___CRTL_TLS_InitThread ___CRTL_TLS_SetValue ___CRTL_VCL_FPU_Hook ___VCL_add_EH ___VCL_clear_EH ___VCL_init_except ___VCL_init_fpu ____ExceptionHandler ___getExceptionObject ___raiseDebuggerException ___terminatePTR __argc __argv __argv_default_expand __exitargv __handle_exitargv __handle_setargv __handle_wexitargv __handle_wsetargv __matherr __matherrl __max_dble __max_flt __max_ldble __setargv __tiny_ldble __wargv __wargv_default_expand __wexitargv __wsetargv __wstartup _abort _fflush _memchr _memcpy _memset _sprintf _strcat _strcpy _strerror _strlen _wcstombs

vmprotectsdk32

VMProtectGetCurrentHWID VMProtectGetSerialNumberData VMProtectGetSerialNumberState VMProtectSetSerialNumber

Name

.text

Size

21KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

27KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

53KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/TestApp.exe.vmp

SHA256 1380c5e4d6aa7e5df02126c6da0785840988ea914e15733eff24d54ce724d37e
MD5 7a22fdc00465229030f82ee1546ee17d
SHA1 e08b7d23145337e39e955eb5b174ec82d8510505
SHA512 b594358a336b45b59fa50ef923898a1b9eb4008cff9470c563df67369781524058bd194aea864e21bb4bc9b1d111d27a369b649b3cea8af0bdfeb46a7293d7a6
TLSH
T1B2511A00F5FC6C24221F11933F854CAF6AF0D378892DB50870B951927B6CD214B9B1DE
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/TestApp.map

SHA256 b934fcb652ab5d2140d850f3b0ae6a94b8f32b77488c39d0c0f27d0325603c4a
MD5 a97faed498748fcd1b7333fa88025dbf
SHA1 919407876d7f3e8008d6cbf8745bfdad2e605709
SHA512 db44bda6bfbd6a0907cc7ebfcdd0aeb080e6434bb3275f08dfee4e372044cd2b89af7801c9e64df596af301c8e5fd9e639bab90d5292eaf1926ae0ab0fbdbd2a
SSDEEP 768:15s4sEkAdPt3e3K3nQGIxglH3K38t30xokZ35Yd/mwGzD:Hs4Vk6GiTIxYi20xN3ubGzD
TLSH
T1A923AA7023AFE0D1D167B2A17EA1FF848065F4639CF2B80613EC2695965716CDB32B87
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/TestApp.res

SHA256 d2a39b36d2ea96c650e015da5666045773d285dd610b66f32f783b66ca12ede5
MD5 898b7d735f370a06f87ff9ef2bc48905
SHA1 9fd64bfea353ef474a91c7339528f49821b00e45
SHA512 249276a20fdc6764bbd9e29635fd1cecb873edf88b68a72fb89645cc7b83e2e6e7affa3687d2316760c442277edcfb9c73f781103b6c177cc4c4975dda3c1447
TLSH
T111210E0293E49616E67203B129F2D362D6986E230D6E0BDE308C275F6F35507C6836B2
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/Unit1.cpp

SHA256 2033767d11c451d3400e378249ae860386d08393d77eb3cbfcd312d67b391c78
MD5 17d8f63394b581ca28cb3713bc826453
SHA1 5a3be0740fb1feb60b2f82afe0178f45662cce34
SHA512 10af95b1452be112dce41ff603b145fa6c9c9d5ecf8da464be442c57d851074b57f86ee06b92eaf1c3a3b49e2be779c5fbb477034ef9f39a2f8ce3babf733a63
TLSH
T19A61BF366E10644FC0B0F36A23CC54C5FDC1C4B93FA49E6A63E8835212B753D9A7D655
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/Unit1.dfm

SHA256 5d6843ef4980889a4116c3fda176e41461dcdeab534e705b41491deefc6f05bf
MD5 2b854036addc4e47761e4b7e5fe03284
SHA1 ce467f33b326943eab04a3893d8b88bd4674d6b0
SHA512 0bb148f6e60a7622ec8b13d83675c826684966adb6bc90b2e7f56d74d8614bd2d37bc1c999df4c76d3d6cc805b4fb434584b1fa669841f67c4def96e0be847a8
TLSH
T1EC3190FC9314B31159A7C11654230A89A82D725340472035BADBCAD9BFC6A1B77D53C7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/BCB/Unit1.h

SHA256 fc1272343207d87a78b392e6174652c921e99092962524c321b70414ee010b64
MD5 1d9456dd1f7c96cbe8c20b68b176a771
SHA1 1b96942d2bbc7b09c5073393768289b14d6bd55e
SHA512 08f166fcaaf6bf7a2f80f24a20cbe13f034a5094fa617df715489f67104a25dcc02a007fc4adcc184dc168349816bca66e0e9975c78aacd425d2d3a02eb22ac4
TLSH
T1CC11CBB02F0C40979079F735C31295E2D2899130A747AD2E71BE94D186A52A063DF386
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/MAKEFILE

SHA256 e85d21d6a3914bfc6581f3081aa7c32c73230b0dc1589886a8ad49017f535c23
MD5 50db12ad40b2eb85097d4991352646db
SHA1 107c94a244cebdf463ebbd962a2bb7431df11af6
SHA512 8d15bba0b50a853e47c8d98cd8e2e55505934b6e0038e410fbb55d74790041de2a376ce7affbc32a8702c7bbe408f30cf9adf290b601d41c793df629ef5d8329
TLSH
T19AD0955717F4F931406571006F17374B375254BDEDDFC2385010645D336E4214159EC4
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/SOURCES

SHA256 f350c4773645acac184cef5c8819bc7bc3980130fa3b651da64819aa3365616c
MD5 9d1279ea215fb5f5cffa92bce170dd1e
SHA1 7064521ea7ce168d3dac97abbe4181c3d942c911
SHA512 4faf4cf4848735cdc80d7aec042ecfc28d89533e926f4e0cbc035f3faddaf6b68eb6662fb27c65fab813ff6b3cab2e6002e0929c2950a7b5c459bbcaa7da1ea6
TLSH
T1BBC092B633217B4B21DB12CE7C49EC6E2949494048EC4CBB02FC03A18BD93D766A001A
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/TestApp.c

SHA256 f83f3a8a170fce3ede88bc4461d567ee7169cd3a2e6a023a6c6d775e64ebe422
MD5 82c62fed6855717c063bb4c74384764e
SHA1 a37617eb1586491f54e98e629ae99951a7b49c3d
SHA512 fb6a1fdff38eee3c4f775f017cb8a9b54643e9720f81a67a3cbd9c4dacafc371a2189efd7a2d62cc39a6a55a85e6c521cd15397dc204bda5f796ad85adb08fe5
TLSH
T10951FFE78815E8DF94F132B1011E48E83EDAC27437F68A616150E36261BF25D973C7AB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/VMProtectDDK.h

SHA256 eeb099b49d4613c25bf594778423eb336d85fbe6f19ed1142d2fb67570a6a259
MD5 63047d84ccc63bddaeeee7bf6c4f772a
SHA1 4b77639f90ecf25740f4d917ebbf6adebaeac083
SHA512 2ebea6d5c1c50319271d115e157da361ae186a625e969242330ed3ca45858f5d93d4a0935dc50a5382129fba5ddb1b438ea0e52054812dbac7ce46f16d306692
TLSH
T12561C1410D01342AE192D7F5172BDC6125ECF52335F6DCEB261634125BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/VMProtectDDK32.lib

SHA256 1f81028312343198a11adee92d41d677458c2f1199e9562119858f64690c8d9e
MD5 da56d6b2fffe23163f158c9d7683700c
SHA1 ed812537992d722095c236db0427b844043c1f15
SHA512 2257cec02e592d841a0df5d14c769a655301e1950b3d91ae555abfd51b3f307e3750d7bd11b20e3c25945d73f046184958333ce3551d4d69fc2e8430addff656
SSDEEP 96:Skm/+uYlVlQKU3v/hknm/KuK7KRulo+WlqnT:tVlE/h3TO
TLSH
T175F1A8378C12BD1FC4FAD4FAE696DCEC39AC304A22F2D127751C448593E50AD7A9A04B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/VMProtectDDK64.lib

SHA256 1cfe9490aa9991d1327260607e97831f4fdc172df5a182a8f7ef6bd59a0ab75a
MD5 02e457533b7776d2ce15a3a3486b0a7e
SHA1 ae1d39b93035857b1a6e316a7842b59a64f92f9f
SHA512 84b8178eaa6f8bbe9dcc75b9c5aa92a40b1a27627712de74e2ba6cae5663eaf0ad1a682b6fb467473420e242dda2042b6e63f57815f3a257cb124623f2a741d8
SSDEEP 48:IZj/k5RLRzRCRXB6cI15lXy/F/CRcRj15T1sRLRyIBrjX4nKryAOFsgKer5PKylZ:INkqBb1CrMnKeKwKyCsuYgJt0
TLSH
T182E13A399C52BC1FC5EAC0F5AB25ECE93EAD004212F1C55B7C4D1A5187A236F734628B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/bin/i386/TestApp.sys

IMPHASH c1335faeced066df9bbc6e5efb7d89a9
SHA256 4cec6e3d2f9b7ebae6f4add1311f7b7a37bc29964df0495ae32f8820ce57fcef
MD5 240e80f81fe07673cfaa2602d9642a3d
SHA1 84440e54d4ad9357759b774f062130794bd28358
SHA512 fa5e64ab00ec82909e17c5d912489b69987d3d593ae321123583badecbea85cbd42e8ad85b1e6ab7ae4231d7c89ae2655d62b9f12d0bff3a5c0f83ed0ded22d8
TLSH
T104817402650470A7C8E931F1216FAD25AC85CA7217B3C3967F6162577836698BA3838E
MD5 SHA1 SHA512 TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

6

Entry point

3262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\DDK\bin\i386\TestApp.pdb

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/bin/i386/TestApp.sys.vmp

SHA256 c921f7d514172b9e9f4e01741ebc21f533a1f2714d69f9451991261d98d480a8
MD5 f92c50bddf843ef35fff8e6b99fc22f4
SHA1 5e6173ee6baf45b7e7c9dc788a94ac537767a99b
SHA512 3f58c765dd6b0364930c00d7830fd817359e485d96c3cccb8a267d5dde7e16d5320707cc0574d5382c29f86d658dad0437ebb9ae4c8a3dd3671d34e479a40708
TLSH
T18341F850B8F41C76264E21967D4A8D6F5A90C36D862CF78C70BC62867BACD37494A489
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/DDK/make.bat

SHA256 c0d98cc938be2dbe06c3a60d006b0fbcf978851ebd900eb58eb47b4517392369
MD5 defc2d0258acb7575dac1b45771f846e
SHA1 e5fcac7e8df034370812710193b3193bac7860ee
SHA512 d2322ed9f6b0cd71d946aa1972de4b91e121f4d61d1cebefb89aaf9bf0ecadea90016fbeb2e0b038f6274cd9edb69e96d78f2a7ebc89a990698dd6c753236fa6
TLSH
T18EC08C0E080141435915120F47480D0A02E6A1203554C94E2A1214046B9DED62F40DBF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/TestApp.dpr

SHA256 7a29eb59415923ca8bc05cc378ca82ae37998aa365de8f585167fdd9ba9495d3
MD5 d91de24f5fe0ffae01dbb9dcd66e689a
SHA1 5185bf74ed57a35a639e9c51055c96c87519c634
SHA512 9a40ef543e0ac08c3bda3f5a7490d49d25311845342d2a812db152420842f96ed5d994a004b5d16744278f52d4f9a88ddc936085eea505bb193b77100fe77794
TLSH
T118D0A7D7178D01C341D731B72C0A48C1A062C53C4C8062043518A499980A76AA353351
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/TestApp.dproj

SHA256 38c178daeb0d0722d18b1c51f7e24607648c2b56e02c04aef4fdc3ff4d569e42
MD5 d52dd1e5f9560afa384c09452686127c
SHA1 8760f98486337884f23fdeb7d9c7c9415e67f558
SHA512 d0870ac0826bcfbea727eba955ea2bd2ea43e717372b97b5dc6c5e48842bd472340c7262e76e7be29db01d15d13112d6ffd789633e865b6c3a42e91b552e7ea3
TLSH
T10F816625498C2DE981EF537D5A463440B2FF6BFE01FCA858F5F7A51A736674C20029B1
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/TestApp.exe

IMPHASH bbe6bbe2bb17a0cd01758afcc31fe177
SHA256 2da43ba896fb35d40555cb641a94b1c74c9568e461591d31cb141bc834336eeb
MD5 047322602082c74caa337004efbc72c0
SHA1 8671d39e04ad3b4c005ee7c1b2de0c43c5639bef
SHA512 12fd11383771da4add1a6b9cd3186d9c854ab35abcbc5209e844db8e3bb76777fb52844b2d876df1ca7e858e54216ff9eaafaf7005b18f95832c440ba496a61d
SSDEEP 12288:OrySorhhzNWWJVNwf/WGXJ9yipE64AaSoJ3O945BGSjSqjOpeFCNMM988888888R:iKhhMWJ/A3Z3pE6erG6BGSjSqjOuCZ
TLSH
T15F055A13B291173BC026D63AC96BD6A4DC3BBAE02F965C575EF49C4C0F39281283A757
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

724048

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW RegCloseKey

user32

LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClassLongW SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClientRect GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CreateAcceleratorTableW CopyIcon ClientToScreen CheckMenuItem CharUpperBuffW CharNextW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrcpyW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc TryEnterCriticalSection SwitchToThread SuspendThread SizeofResource SignalObjectAndWait SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile RaiseException IsDebuggerPresent MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryW LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTickCount GetThreadPriority GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateThread CreateFileW CreateEventW CompareStringW CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetTextMetricsW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap Chord BitBlt Arc AbortDoc

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

vmprotectsdk32

VMProtectGetCurrentHWID VMProtectGetSerialNumberData VMProtectGetSerialNumberState VMProtectSetSerialNumber

Name

.text

Size

697KB

Virtual Size

696KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

670B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

63KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/TestApp.exe.vmp

SHA256 a7738b1c13d06946f22f7312bb94b8ca6874618cb1ae09ff5ab872ff7fcccd31
MD5 073dd699abfa27fcb623a1c05af11828
SHA1 d5eb38628bdffdcf87cd985791a4e0062ec259b3
SHA512 f9531de185db956a583082313d68cd6688a89432f70d8a174e12609f220f43419e3cfee67c0767ba0bc16af99b45d2e350e39d42d42342c66856460f73d1e735
TLSH
T1D0512800F4FC2C35225F01933F854CEF2DE1D3A8C51DA608283942977BACD264E8B2AE
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/TestApp.map

SHA256 808f2cabae2acf1a4e80a33a5317d6c04a708b20f2ffd7e7478f7d8aa190a857
MD5 b6ca5975efe41005dcf39b7025650c4f
SHA1 74c819495cd1cf670cb4e5b135efd5e76c796a4f
SHA512 6ccfdd4aa342256e1ae6eb876995699ec20e388f93fa6e085ab9a65833e8310d32020cbf7d3380a79bf79a2be13ad25cf8a10f06a385c21afed50b40bd96a6e4
SSDEEP 3072:CItW22+EOZ+gFUxYEqe/zS+6Qmo/+4aOPE2PEYRWuzGk87EJZDMGTtccZXjCZpwX:JlzSmedHv
TLSH
T19FB46674A86FD2F08853D1663A56BF51485AFBF3C1B21E2B335DBA08538605DCD9232B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/Unit1.dfm

SHA256 215adbba5a06ed3b92985ff9a4e51bd83d16376c486c59509e982222a3c5bd79
MD5 b66d0e30875aed423312e49ecccd24da
SHA1 003f5f66fd8907f83c5771da88ce0f26bfb97296
SHA512 39b529b514131e32e40b7022cf58a2474aa63ac584e43825980ca438de521bd9f077c68b6e08e5dedf6c903797b7bf2b01ea12e60ecf39b3a85b033bef02e155
TLSH
T1C83170FC9314B31159A7C11644270A89AC2D7263400720357ADBCAD9BFD6A1B77D5387
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/Unit1.pas

SHA256 5143486e34ddaf73573357df4691a71cad7962237e2cd995988b4dd7dac8b159
MD5 4514433f6347771a41a69f53bbc18159
SHA1 4db8135d29e7ea81bb0e76e364895184e288e4b4
SHA512 808fcc8d8de8d062109beb5a7666ba2b443d9fbfb6a451bd51d7bea544edeb93307cc16c83bb4a18ecc29ee10b2317a2f0f2bb509b2705b75e026f42decea07d
TLSH
T10261F2230321717B49E79166330B54D16CC081266A68E6B9719CD3450FFB719F6FC7BA
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/VMProtectSDK.pas

SHA256 935c599b59ef4e70eeb3c87a05a6cb7351e0820ecbe4b425b86d47301b1dffa9
MD5 97a96877fc2c184b0e73e85529b34822
SHA1 1c9df39e8b82351da153d1d97efd43e300d6a652
SHA512 ae04154dd383d18dbcdc65938381a9cba2b273faf9748021126b5e3b0b01e03300561d09ebda3ff24b7b917d58f3572be21ea291a3e4c3aed8ac2c8be062b88e
SSDEEP 192:xZ37KYVlOuiI72qkMPWYKQZYk4kpkgkhkokbkOkwkaknkDhkpkMkEkUkikFk1k9h:xZ3zP
TLSH
T129128B754B1174CD84AA747B736FEC9A293953A0A0E1E5F7B002A7B1CF8E058750BD8E
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Delphi/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/TestApp.cpp

SHA256 be20d30578177fdec9796a58e6547a67c4f7e909a1aa2eb6a5f9074164dd58cd
MD5 a22fded4f4111e86de9516025e5ac99b
SHA1 ea66a88bffad60c24ae9b7bb2d14f6b2bdea8fad
SHA512 86b644843e2c7f04dc6da5de024c938eb1c61571264cbe63cbba2d21f7112ccf36e6b4ac9d5cb7780f17fc5992ff77caadd376d9b486fcb129a3bc69e16708df
TLSH
T1A8818107C51CB9AED97A13242807FA783C3B868174A3A812A1497329F7514F9E538FCF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/TestApp.exe

IMPHASH d459861a2d3c1b915fecfb235adf0ae5
SHA256 8a4c9ea04610c4f6bafc03d59c55acc2fc5cd5db696e3c5023dfbe9666138a10
MD5 cd4574367869ad8be024572b65312f19
SHA1 a416742807237b0c88f461e4c5e37b093444b40b
SHA512 e3560a4e5b142f4de4f2cf0a1ebcdbc2b9ccb0d289f4963e94ce7a4d233c395e644a0dcb4207a82dc5af1da84088c9df18feeef765858e9e52f3e4e1fb983d05
SSDEEP 12288:ZSgSbHYUVii3uuJbVS2lwbVsbnNfAMmcyfSifU:sdc2lsVsbNYMmVfm
TLSH
T152050801B7A15018F9F716FA99FF3068593DB9E01728E0C762C46AED9625AF0BC31B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

9536

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\vmprotect\examples\licensing\MSVC\bin\TestApp.pdb

user32

GetWindowTextLengthW DialogBoxParamW EndDialog GetDlgItem SetWindowTextA MessageBoxW SendMessageW GetWindowTextA SetWindowTextW

vmprotectsdk32

VMProtectGetSerialNumberState VMProtectGetSerialNumberData VMProtectGetCurrentHWID VMProtectSetSerialNumber

kernel32

CreateFileW DecodePointer EncodePointer FlushFileBuffers SetFilePointerEx GetConsoleMode GetConsoleCP HeapQueryInformation HeapSize HeapReAlloc GetStringTypeW SetStdHandle IsDebuggerPresent RaiseException MultiByteToWideChar WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetStartupInfoW GetModuleHandleW GetLastError HeapAlloc HeapFree GetProcessHeap VirtualQuery FreeLibrary GetProcAddress GetModuleFileNameW InterlockedPushEntrySList InterlockedFlushSList LoadLibraryExW InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree RtlUnwind SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection GetModuleFileNameA GetModuleHandleExW GetStdHandle WriteFile ExitProcess GetACP HeapValidate GetSystemInfo GetCurrentThread GetFileType OutputDebugStringA OutputDebugStringW WriteConsoleW CloseHandle WaitForSingleObjectEx CreateThread SetConsoleCtrlHandler FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW

advapi32

SystemFunction036

Name

.text

Size

605KB

Virtual Size

604KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

143KB

Virtual Size

143KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/TestApp.rc

SHA256 8e93aedabe43fab1ae33c5e5cb27f43f69b0a7d3c97889542232369e81739433
MD5 a15ebecd275ebfad009118d84474d32a
SHA1 6765300f6d1025f5ca66ed0b7b3bab6e14e03f8c
SHA512 19dd422f968178b657ee70efbf84d0f4359d75fdd3cb1fce327a9f3d52c3387a56e9ebd60d6c6f94cc11a0d563002aa44aa7eea8ba4647b9c7dee44ab4af7160
TLSH
T1C05174208940D373853871F16D057ECA622CCF3F4A058A64B25FB3ACDF236B412E85EA
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/TestApp.sln

SHA256 7700332fd23fb38644831eefc910ed19f45d3c9fcf1daf4df7c69cd5fcb3e9b9
MD5 4c735b3a298fa6d131084edfcd7123e1
SHA1 7e2d3d3baa94e821d1077cfde688f76751d9f8df
SHA512 95faa1115aef44ec6cdc32a85ba6607f05e2d2b146920f415b4576c7d8ca1089a192251a2069b8c4f879e14e927b0294987102a3274c9e5688e88d0795034b15
TLSH
T10111369C101FBDE1278606CFE1F94E6AED3243A18198463C146190B8DF16A57C2175CB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/TestApp.vcxproj

SHA256 132e9adbd0a7e5dc8aa64038ecc14f952346c53545f48e132cb787e7b8e59b51
MD5 5c0624795f71c6bae558b30897879b65
SHA1 22913e16d622f13fdf5aa64b6215735aced56d71
SHA512 b9ff3b6c1e65795d1eaee695064bb12ffab029e19a7db50eb7a1ff3bc903e1029c34c7369836ea147cdb6707ca4ce0daf08854cf2ef09fdb0dc9379d77e4ea17
SSDEEP 48:32uKyZFFM122efHX2EjwV2Ee2er8oM2JaLv8qM2JaLvbLIysQYO2YMwrNQHYYNaV:9pMefmchwyaLCyaLYyaGGtZ0ABvAUC
TLSH
T1E8C10B99E0F85D4B815A8233D6EB99814F70D3834E59086CBAAFD3599F63684730BF31
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/TestApp.vcxproj.filters

SHA256 bd512c5162c3595f940727fbecc5b761b558d6c199d26e65557848cdd22bd9d7
MD5 69e101adbd1fec287b8df18cfbb8ca2f
SHA1 7fdea7351bc8d32fca43bd52b45e3034cd6597ec
SHA512 d40acb3a751decdec7d52efce92c4cb69948775a9e16baa80eb7862753644a6a3efe0f8070ccac7d948558c7979e371a75fda4abeba920e6f9114a26e70417b2
TLSH
T130215B31C4FC1B8DA0215D57FB84DD191FA8F3F364D11048B6EAD1066FE270AA52BA6C
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/VMProtectSDK32.lib

SHA256 d64b0a59b22d6e6608cf015f6604b7555565045f02e9c45978f832f71cd2feb0
MD5 9d9003aebcca493ef6b4f1b9c68cf9d7
SHA1 c8b19093ce39b97f2dc34475dec7b42919ab479d
SHA512 a9d1366009967e2c19cd6ef75669cc7aae2917e1c3475f0ab40017a97285c5d35e2b135a1f824f28241a535255219cc9a7285c65bc42bdd2df7ee12ed09d9c9d
SSDEEP 96:RCm/+uYlVlbKU3A/hknUbKwKXKp4bGDbaaHj:EVlk/hNl4C
TLSH
T1EAF146374C523D1FC4FAC0FAE2DADDA93D2C30461AF1D167716D04925BAB48EBA4A14B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/VMProtectSDK64.lib

SHA256 756206c6481a751345bc4c54a50fd38dfc41aea01fd445ca785c1d0d1a57394c
MD5 32599fe22a118732b9261e1fcd4f94fc
SHA1 d3a16a31f92ca0b2eb9d3323d9b95687e6b35ec3
SHA512 b8e633211c10833cd6b2d74cb30f4716d2834bfe59a5b077399e7957228cb0ff8b93f66b5b39da2962efa31821b18a73f7d6a7917e139d3e065ed16ab8dc1a8b
SSDEEP 48:bZ5/k5RLRzRCRXB6cI15SXy/F/CRcRj15T1tRLRyIBrPInX43KXyAOZMKln35vKX:bjkqBw1xrgo3K/KLKbevmYAxj1b
TLSH
T1FFE1883D9DA13C2FC4FAC1F5AB29DCA93E6D404212F1C16B349D0A41A76630FB74668B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/bin/TestApp.exe

IMPHASH ae2c24d912079246eea215f597cad7bc
SHA256 27040cc4bf7feeb79941ed94fa06628a0c6095430cd57f1dca08180e0cd77b44
MD5 34a97d2dedf175eb29b84299624e0b4c
SHA1 50d73f9e0bd7c06177f78a8bd0364201758de982
SHA512 6a40cb75dfe43d1f4d257fdb5ff830a486b0dd5407bd00e381d6d541d9f7ae9d05b5e6eb7593dd2101776dd913c48eb41385d4ed268d6e72d092750780f42436
SSDEEP 768:6jfSdGtUyIzKviN1myn7Kf7ip76FEhaSHhgvt7kuyCEDDXnVPK9LD9jmQ:8fVVYKaXmyO7iAOa5vt7kBVIDJ
TLSH
T133335C1279E1C072E4A215300970C7A29B7FB93396B5C6CB7F4812BE5FB17C09E69366
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6467

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EndDialog GetDlgItem SetWindowTextW SendMessageW GetWindowTextLengthW DialogBoxParamW MessageBoxW SetWindowTextA GetWindowTextA

vmprotectsdk32

VMProtectGetSerialNumberData VMProtectSetSerialNumber VMProtectGetCurrentHWID VMProtectGetSerialNumberState

kernel32

InterlockedIncrement FlushFileBuffers CloseHandle CreateFileW GetStringTypeW LCMapStringW IsProcessorFeaturePresent WriteConsoleW SetStdHandle HeapReAlloc RtlUnwind GetCommandLineW HeapSetInformation GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent EncodePointer DecodePointer HeapAlloc RaiseException GetLastError HeapFree GetProcAddress GetModuleHandleW ExitProcess WriteFile GetStdHandle GetModuleFileNameW FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType DeleteCriticalSection TlsAlloc TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime Sleep HeapSize LeaveCriticalSection EnterCriticalSection SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage MultiByteToWideChar LoadLibraryW

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/bin/TestApp.exe.vmp

SHA256 4a40dff2f59392486cb4b4e0ffc8727a3d8405ff85cb7ddc1ee9a6b2e969d1cd
MD5 e97d15dd9228e17f2f27f22f80a33808
SHA1 d8d64dec9ccc6a6338b31c0b9e3924f0ca5cb4db
SHA512 71231df5f3f8123be9597ae16ae5874feb81b3ae12dd08af0c6c0168171ab4230cd897bdb10736a6376c76ccb048db5c132ff59ceaf4b3dd4c8655782dc5b1e4
TLSH
T1BC51FB40F8FC2C35235F11973F468CAF2E91D359441E6708647D42A67BACE214A971EE
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/bin/TestApp.map

SHA256 9ef8c24ea70e1293cec8ec3e9350eb8dba42c0889c868012b31df2d508990e87
MD5 c74d12ad7af2fe832792ff423bb9fad9
SHA1 96e0671ab401c648f20879583d9c89b48b38709a
SHA512 7728d4ee81401c740b72f211e0f383e00bb975703e6b02859a2e34fcf46b220bcecf4ec87c566552720f260e2304522f4fbb04c29e7a8456343bde3b54b4dcc9
SSDEEP 1536:Q3JA9uQHWdxYazzj23vulQ7RfGjSa1y3WKddiW+BDpm0A:Q3JWuHjavu/Sa1ymKddi3A
TLSH
T19B63353130CEAAC1E6CDA6823665FFA8D149F41341E306D3B25D66C0E3EA39AD65D44F
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/bin/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/bin/VMProtectSDK64.dll

IMPHASH 1851ff453adce0cef5274e320d5bed3c
SHA256 db095510f12ce0e3bc41c6dcc9e91751174e4eb7a0533961f63fef024789f9b1
MD5 db4f1a1406d292162a3b99d1fbb74822
SHA1 a9f3b4cfa0347b4f067d303fa7e9f0905b9f5838
SHA512 dcf4ca867c88ee6b74d52cfe3a66439f538f750b1fd11c6708d003396cb5cd4548271ccef8dca74b078c331b4da7b9d46ab6cdc63a5da9524e9ffc921eeea6c0
SSDEEP 3072:qmcqYHq7Aiytzg2ScpvgJcG5sqYX6U3H6lBS:n0Hq7AiyegZgJZSX/aH
TLSH
T131C36C57B3E540BBE1B6C679C8634A55D3B678150B24DBAF07A402162F233D18E3AF72
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

2

Major OS version

5

Entry point

8864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

39KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/resource.h

SHA256 a1e0e3c4bab47093fb032c41f81c6557366166ed2462647229947a0a58bf7225
MD5 0bed505cc9c5e63549b50d97eef680ec
SHA1 6d6a26afe21c319d80feb5628fb19609b9c5019b
SHA512 b5e50794c359567da7baadd5b5d3a3884895da7bcc419c6eda84702eafaa961193039cb2442571fa19b900c963237ed6ce255ea9c3c1a81cad56eb4611498e1c
TLSH
T1481124394CC8A483A8BCF0C9008D86161A89ED37D5B941AF72CC688CAF6512217FD2CF
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/stdafx.cpp

SHA256 c211c0511685ef7a7622828f27a0e8a0dcb893fdde899c91f60028ac9fda1548
MD5 c2b1e605bc95c8205478b1837aff2f36
SHA1 8a2f9183aab94a06420b6f64bf847fa4b8fea386
SHA512 3d7b1c6b42f91cfd5621bb8d4d8e5d5ba7c9418201f0716b38a5f13d3f9f852bb85149aabfe0f908ec71a11582727ffec0cc59464a7b680ac031acc3c48527e8
TLSH
T1CBA0220080388800F08020C8B000EC28B008FA800B00000C08832AE020280CBAB02208
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/MSVC/stdafx.h

SHA256 94564ccb4f70b8a67bc65fda69c8a97d02ec0de1bb15bb1df462325f0b7233ce
MD5 1b4ef9ab0026dd41b9da425dcc5058e2
SHA1 00940f1e143e9195b63bb24335eb22e09d2c5f7d
SHA512 4d301b4fc2181a86bb142d5f8d52ce061382cba641a85dd18f3e8594de73077346f2fd06c3b7e39bf515c8eb78849a323400a84053feb6249872bcde123affae
TLSH
T14111BE01E8F891A1C9B1149078867B5BF94D36230A481FED9C13B4992EAA00F43E99FE
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Form1.Designer.cs

SHA256 a6104f95433254c1318dfdf982c12e055606724bfb20dfd9db8339c07b360e5c
MD5 65e12cf08886b99029e03f174edf088d
SHA1 96f958debe1e4e51218e75e467b9b69f1cd061e2
SHA512 ade85394c5a094f92fb66dc29fdaeca977b446188c89a6ff323ebead973b3a501e0a5252c464dc4325b5ca9e8e63f6a77b2849773fda122706fed6289b90c68c
SSDEEP 192:/wlZpEsrWKeUbRR1eULVfwfmGZH46PY1G7ZHFpZmUZH8bQeUp8pNbig:/wD2sqaRTV6Y6A4lpbcbk8H+g
TLSH
T17AE19CB4036F9100D5A6718C8F0BA6D09D25923B7A2ADC6C78CF4AC0DF523355379AF9
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Form1.cs

SHA256 fa40acdae92b35329b433167c1a80f97d732c46944af4db7b56f7af294296271
MD5 d332f9ff8aa9e058064cecebf80eb8af
SHA1 5d9075c90818116f9564431a877b45140fb251cf
SHA512 0f6978fc89dcfc10b1527546094d8c5e41dc91deb5b47d4b78e75f1f56f177d87421ef6fe0d91f4cf59ebef20e622bfeb9ae1fd6c26e9a5f3b4265ebcfa6f425
TLSH
T1BB411028127729AD94A330BAFB17AC767C6050270A6EE40379ED8414CF36804FA69799
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Form1.resx

SHA256 cbe7a23cf57abea4beca57ac456d81e11a2967d92ecffbceb7e3d7eda012789c
MD5 a68d2579fc8dc46959c19757aebb95b2
SHA1 40aaaf55abb00c31c56c66911f0ac825842e6469
SHA512 1e7fce7f98378918477b4b158b354c98c2a85fe8542ed09e6f4d3d9220e1f582b9c6c7aaaa629cc32b05da483a5f5664e4552bc60c10c00a877dd1c97a6289c8
SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFC3qxdRMvDbu8KsrbEKAy202W:Zf+tLPfYnLvFVOiFQaUDU
TLSH
T127C11F45B2D1DD260EA3483CD65139847BA8923F0234AC94B4DC961E5F92B85A7B33FA
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Program.cs

SHA256 dad8c9b86e07126f4f5dc2365d095d6541e9705abb96ce52b4bf1a7bf3459e7a
MD5 5f76cd0b9e5210fed020c4ad74ff6d61
SHA1 c57cee4869b427e0a1d883cc44e6d7c4ecae8fb4
SHA512 94a12f60ba92cbbfb67b3ef8130bd775a8c29cca19d563cef805bf31a046a3f87dd9e60fc6206fc484f1f20806d5f1779dc36a9db020b8fcf493be00c98ba957
TLSH
T1CCF02BA931FBD6D45AE754F71719A0C81372593F0ABAB400B47E0610DF15005473DD45
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Properties/AssemblyInfo.cs

SHA256 009cd892f5506a8bc9f7f6e212fbbdeacf97143abba2369d97011922bc4c0c36
MD5 1b25bf3b2a9a4f5ce3385a003bc2a9a0
SHA1 8cc35c443151b9364662d04d94416f21ef8c5a27
SHA512 64bd2f4ecd0ee95b54ee51c56f56b45c3100e8a831b9a17177b0069c6f1f1e603b8c3a103294bdf34b9ff486a7b0a5b2fffe4a050edb775985d30d88d95f6677
TLSH
T1B7219C256341A37E0F520053AEAF7185437C537CD3EA0D0528BC6463F711B3402A59BB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Properties/Resources.Designer.cs

SHA256 f76b797c9cc397bbcc17f9fc9f6c2f4b60f48311f4b1daa1ffe985cca4f901a2
MD5 15490be7e34f47bac570401bb099622a
SHA1 92d0cf22b8b66c4d3d1265e099fb8d9dbff25b2d
SHA512 8174cf00ebca2797c3d9612c7f8b32006d9be484fc35f33b319372f1f624a791096a6c0c30337fbeb703090e933b41f2fe9e4559aac677a417581724b7eefb74
TLSH
T1D651CCF74FE9C5320826D8DF4B01F851C7625113C67CD834F8AE02689FAB35447ADAA9
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Properties/Resources.resx

SHA256 4e124f5a7694ffe813c60601b1b73c53e47536b1f1c0e798d4d55bfc2ca3774f
MD5 c07716633f086d91759ae32a18996a1a
SHA1 bf3383c20acf6e64ce49f120938456161e5f6cb9
SHA512 c6ad0ec603ff69d2d1b787db9426f29d44ea1ba45cf1d2b7ec41cc2bd6d5c93af8d2299139cc1c5d10d56718f36daa37d544f8d5411fad91a72efc2e70454cdf
SSDEEP 96:ECf+lbD5X5LPXCazYV5Lv6K6uOidfaxwsxuUPFE3qxdRMvDTursrbLAy202W:Zf+tLPfYnLvFVOiFQaUR6
TLSH
T1E3B12045F2D5DD220AD3483CD64139847BA8923B4234AC94B4DC961E5F93F86A7B33FA
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Properties/Settings.Designer.cs

SHA256 8ce6fa1aca7e849d50ff795b87af35c3a1d0a10748652f4ee1b5b98b2cb325f5
MD5 f3ef1df0e6bd09e52c3a26f7ab798975
SHA1 961c6b8bdd82ac65a74413f7edf00b70dd94681f
SHA512 6058813dc34603638ad64b469ab1b248259bd950024a3d9f3aebc7e21bd5bbb57b8a0636ad0fe8b6e04ac20e82f015d79ccd2735de11e846611b4cfe82e0e99d
TLSH
T1ED11EFF26EE1DB3B1546E4DADA0AC1A3CB31522BCB2DA835718C0101DF0A64493EDB99
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/Properties/Settings.settings

SHA256 baba99193fc1787141063b135424b476ff4151beb833883fcb594631f17c0147
MD5 29a2bb6bd6f85ff04804c473e895de92
SHA1 48d8aedc9ac54affd627fd9737a0af3ba713f6e4
SHA512 e2126226fde15a2cbf850824ae9bd2a04910aed905d3f6df366c629890f4ce07404c9fcf30bd41c61c73fb589ff254b8ab328bbddced7640e734098e542bdce2
TLSH
T148D0239BD488C406D6617D70F46CF13C4150677B047D927451F4784C150B1D313D35E6
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/TestApp.csproj

SHA256 06f3b5e8c16d2cc2b19b965cc4a9069c25d807f10fb68fcd4f85a00a797605c2
MD5 2a70d46393efa0c0b508c00259c12bc7
SHA1 229f6e2b3d56f401b6dfaaf1a128aeed74e031d3
SHA512 8890d0afb85cd17a53b783096771746155f45e5ddeefe33868632d0ac90cad67754c21178ce0661e94a9e9ff80dab63d2477710bba1dd7f31b3fbe84a0ad327d
TLSH
T19B713434E2FC5DFA53A02173C6A2BE010E6463E358B40438F69DE9494B52F852247B7B
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/bin/TestApp.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 b31b907c41e4a8d6e160ff1cab2178a05155d38aaeae87482103401b42f1c9ac
MD5 717506624a3cc77fb5b3cda9df3e9523
SHA1 68b6afcdd7e1f9866de18b1f8ed19a2233d8f28c
SHA512 b00f7f30f6d3915c1bc6cb0f827808d420411184daa73058c64729344abaa2942146887df57978811ca0f24f59737ee7d9cc9909bdcf3a1adb7b449647949e7f
SSDEEP 192:lxkUcadO6Vy49K6KLc+IPjSGnJJO95edM+E+je/a7m9lcujg4c:lx1cgO6Vy49K6KLc+IPjSsJJOidMM6/f
TLSH
T16732C455ABFC9727D4B627B668B23A400B72F6564836DB2F5C8810CB1E637401B53FA3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16986

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Ivan\Projects\vmpsoft\vmprotect\examples\licensing\Net\obj\Debug\TestApp.pdb

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/bin/TestApp.exe.vmp

SHA256 12d575f962291ace08f691050d7f7b57db49dbd66607d39a2bbfbe2a4e9e5a0e
MD5 6dd2942e2d69af23b3f4937496a155c9
SHA1 479e94148dbacdc62a5fbd246e56e50989939513
SHA512 140506a769e57d0536c776fc774f6e7829c1e553c0c3af9919011444b2723a2d58049481c4ca65bb9bc11a64a6faedc9bd37adf0ea777b5273e1bd355df388e2
TLSH
T138413B1568F46C362A9E22D53C4ACA5F8F54C26B8718BB4C307CB2423FECD3B464E859
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Net/bin/VMProtect.SDK.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 b560d162c060b9ce441a8ab9a4ae9d4e0a8121145bf443789c2d978e5f645f75
MD5 fb3f3c72e482cd1014dc0b6daf857421
SHA1 1dc14bc418aa4985dc2cf1621d7cb7c6409da0c5
SHA512 72f55b33826c75aca5dfb0b991722e83dd910cf36d6199159bcd5bcee078dfc407ee16f0855fd3274b6829a39b37ca722c45dcc28f3994b44543b602e5bf2d87
SSDEEP 96:XbeBWY8lNW5lleAWbgjaJvbdI8cH4YJDcbNVOz8RpFxrPOPXCr3c7isLtKMHAUYu:ZY8zWUAOgjSjR+JdzwFxrhfMHDn
TLSH
T1A822A712B3E8A15AF5FB6731AD72113107B7BA594A76CE3F148D010F0B37A546BA0B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16174

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

e:\master\vmpb-bb-job1\sdk\VMProtect.SDK\obj\Release\VMProtect.SDK.pdb

VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/Form1.frm

SHA256 5d7eaaebe389e98f94659b48345f8ef1fbb6b09f56ccb3c9973efda0537adcb8
MD5 1feced7403908c5f6609be8cda36fa36
SHA1 c451df46a6e23d3ded966b070a7adf1c80dc09ff
SHA512 6ffe3ab75e05b79134cbdd1416879b3eed73e6d51bd8e1b331a59b692a9eec045021b7c17e314ca9d0162bd1d86f7fe6c26fb62d1673590f4c8680f7085ba07a
SSDEEP 96:tE5sz/+u+40+/g+5+H+U+2+zOdEbC6vSnbbfIEVnKCoAQrGPxFDn6bCn675rEre7:+aAdN6vSnbbfIEVnKQgGPxF4xREre
TLSH
T147C1008BEE94BA34C86781159C1B54C93C897A275E875436B98CC9CD1FC3A36B2BC3C5
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/TestApp.exe

IMPHASH fd2e4b5aec9d700a0a84f5b1386417ac
SHA256 8ddee2b12d40154c0c6fd7861f5c1ce17405d5d045a8ed9f8151d5621ea5be1d
MD5 a4211d6b512848e881fd2643491a5865
SHA1 fcbbdd16386ad581e87eb3f8c720fef99ad9639d
SHA512 29c1e5f1708ee83af251d7e22b4ba74e96e5eba0f35039593712f41b311df2f58a216bb70c1b7260f5cd123a2f353b13221a375de687d4afa929008325a130a9
SSDEEP 384:Ny0hUf1/rLlaHXgb22KMSI+31IRcd/vIp/vI1qLgMpIhCihBl63TBw2DJQ5Wud:NyU6pU3sn/QqLgDnhiBNJc
TLSH
T157E28312D88D5822F65285710A27ABAA4F073D316451DE4FBB89738C2D75F835BF834B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4756

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/TestApp.exe.vmp

SHA256 e31613107c0cd9df98e7908ad2bcd871a4fc5c99af5f8761a8caec66ce99fd03
MD5 cdbd4625865628e2fafcfb8836cd7ab3
SHA1 8389c5624f3e962635728f72234a226e4d0d0d18
SHA512 eb3598acab1e632de2100028b164e76a09cafc955cf06abe5128502bfae68c2388c64aac1be3cf65506af6f4813389b6de122910d33caa24aca2c2bf0d9b012a
TLSH
T15441F850B8F41C66264E11967D4A8D6F1A50836D861CF74C70BC62867BACD37498A489
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/TestApp.vbp

SHA256 29ff20bcdde07638bfd112349ce371ef32fa8fc23936594b506e550980819803
MD5 cec113a9bb639a4f221b18eaf64ba4e3
SHA1 1e7031bf8633ab9b3b4b3b6e526cb9ce79a0cdb6
SHA512 4d1c4667a78411290333e88bd4b37208f22bfc19ce736dd4aea2c86b3606bfffaccf16a1ede7a4fe3eeefd20b52b0c5e17210b876f39c6afbf620f4b219d06c1
TLSH
T144F02DC0B02438EAE22425638EC47E023D49BFB906C0306D00B888D04B87C3E83673B7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/TestApp.vbw

SHA256 18cced176268187c8d69121df970e0297c6eba4eccf314ffe2f4e2be44b412d0
MD5 2a632d73aeb55a9cb2fea9fc9457e529
SHA1 b127e8b7e89fdc2751f74249397d907939af63ad
SHA512 2dafe3693954d53963f50b16260b9e14b7d6038c7a1afcfc13a8dae4c0c1e9a67ef643284e2c22e649d9613df6bc6c343b7627e0ce04f2a67569152b13ed9916
TLSH
T1A6A01249024F10170B026A43414388018C88F05C053C44804B992053016054248C4182
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/VMProtectSDK.bas

SHA256 84593433973f8040f33aeb52275b882e1ad35463cf4bebd5033931a01d85d2bc
MD5 02c7735bd54a41842ae9f1e4d94b4b88
SHA1 58f144805d56beae2fe54ce88c25047b11e30fc8
SHA512 d5c278592472d95ef57a6305ef5cb94139fe6f91695503286c4fd05c39ee45a746658791f2296b16419af8af357aa0aa35aef122f3c43a064f89a0bc95bf3e14
TLSH
T1C1816C9AE610BCB9C89560E43127DCEB7DEC62A539B9D391403462CF0FA2CCC2795677
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/VB6/VMProtectSDK32.dll

IMPHASH b9f19b4d3ce951c4ff6196681bbb3439
SHA256 ef982759222bf540fe2ec94ba798a6e23992a03e835bdb9f54644c148ab065f2
MD5 40a4a47c96945402c9a61a50a54aaca9
SHA1 d72124f0e790b52293008f32a3a151c6969d5b22
SHA512 d94472fe9d37acca810380cae3cea54c8d0e7642d3b9deaee3354e170c3815a5edf69ed8d72498f8a062b8881830c770185466ea4d5b70ffcf9d3b0a343a482b
SSDEEP 1536:4T33kLmdI52QC2mCYKw2cr2RhXbZ9qu/nDw2a1+YRroJQusWMIcdwL0YXowGF:ghQC2mCYK3RhrZ9dPk2Q9yMJwL0YRG
TLSH
T122A36B10B4D1C432E0BE19390535C5A15B3E7930EF64AEDF73841AA99E742D1AF39E2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8197

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/AppDelegate.h

SHA256 d9c3ed6d74b6576cd4a2c818aecc2baf6bfc198b4090a603aa8d0fb9459022e2
MD5 5d96fd7394d84a433b2976882e1bfc32
SHA1 4552bcbaa7101c0856c6c69010c3ea8d7a12669f
SHA512 7a068a6e25ecbe89acfa2e00203deda07b0462b71e8413005976e805207bed625aedd3fccd6ac86dffe52192f2a397021fe1b2fbbff30ab441dd62f70a37ee24
TLSH
T1D0D05E4CBF88D83692E0014172226551EA5A30082DE0914B37E55E63E899077C69D772
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/AppDelegate.mm

SHA256 7a62926dec4206e73c90df2c1ef427832d31b86d1e8a204222094801a648d3b4
MD5 21755d6786be6bde8aefba0787a7058c
SHA1 8e8b0988a63a993744fbd6d2f2e8dcaeebafc08f
SHA512 c394911b656ce410f7a00601db3097d00348e433b86936fe3f09618397e9ed67f1b662164d37515afd5f6ed90ad36e6ad997fded146e82125b5cc37e52da7648
TLSH
T18851859F7421249E9BF122D39147A4DC2DF8B12197F388F1FCD70228215610AB17C3A7
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app.vmp

SHA256 cf901391bd9f516822e34dbe29c634503c5094e7035a488d4f2e7a7df2f6dd2d
MD5 ec2685d8725dc052435760718e8ce295
SHA1 775fbe732387578dc602368481d13a22124f34ac
SHA512 1ea3a8bb0892c0d52f0a1eb0ef53debc52a6d22b26781ea1667f93cdaa9366b280cb253b17ea3cdd0549dfa275a9b250e403eae1138656dfcb7457f8d35fd2a2
TLSH
T12C411B1498F4983516DF10D53D49DA5B5F848397C318BB4D30BCA1953FAC836854B9D5
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/Info.plist

SHA256 2da33cf03a356af03fdde4f6a0a0016e6ae8ced63de65f0e9818fa236df9cfe1
MD5 294c036c13c7c922c43b26d95a86ba31
SHA1 2d639cd65a115e5134951d3b32bdf449678b64df
SHA512 9912882824095d286513a177829e500711f887c031404cdb5a3f8eab3f7e03c8c1da5745c7f7c7631d58562162c54f4d2d2ed55d5aed9ea0c63c2f5fc2e12068
TLSH
T1A8314CF51A08368D2DC1126617C2554E11D871CC9C7361FFFEC6A51CBD1EC06A371AD5
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/VMProtect Licensing Test

SHA256 de496be3920cc394099a2ec00a8aa195a1f016345cd0c48020fdaea2e2630a65
MD5 e6ce50492c6c59c7087df14cd8ffeae4
SHA1 6b85338bc2df31a08c01d961223fc0b175e5a0d3
SHA512 a49e405b8c8bef85dfa4fb4693b68b13666c000d251cfd28c3ff19e13e8a780741c8168b6e9b1ca62f7a7a591d087855037775b741d91b8d6fb6cf3b56bfd1a8
SSDEEP 768:iKBGMP6z8LPl/PRpWJ4WYlFxs9ugC5ljgZ+NGsIXIAIdIQCxr7pdOVWHSZr:itM6z0NRjWo2VC5ljgxSsr7p4VWSr
TLSH
T1BF532957FF20854BC98B4075C81E8B1CE139F768CF91B39B26A8DA884FB46535F0664B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/MacOS/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/Build/Products/Release/VMProtect Licensing Test.app/Contents/PkgInfo

SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
MD5 23b7d7d024abb0f558420e098800bf27
SHA1 9f9eea0cfe2d65f2c3d6b092e375b40782d08f31
SHA512 f77d501528dd0ced155c80406cfbee38d5d3649b64d2a9324f3d6cee39491eb8f54cdebae49c6e21a20d2309d8fae1b01c41631224811e73483db25a2695738c
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/VMProtect Licensing Test-Info.plist

SHA256 e53b018517b09b8098f93844e19df244e28dacdf9638b44e38e6844196b8d242
MD5 3fc35d31b52284b08696d470cab6c00a
SHA1 c50662812bcdcba1f56d0fe9bc4e5cf1d9765168
SHA512 a24125bc7a9a5ace4e0ead3fec7aa1c3a4f11bdc6f07771d417caf9dfc0221aa70b65c7e1a3735659281d55f8a51e0953743ee895b313a43258a71a5eda80b82
TLSH
T133113AF50658759D1EC223AB16C2514E05D872CCDC7321FEF9D69618AC0E8066374AD4
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/VMProtect Licensing Test-Prefix.pch

SHA256 72c97290ec5fba2244791b389b93c35bb7e077511597faee100c5768db45e2d5
MD5 8369d9b2f5b8da876756c8120bab6cff
SHA1 7b926f132194608aa8ad17ae066b3459df5471d5
SHA512 04e91747dddabd8db93ea06c8b5d7cbdc00c3a065d2742b08d308ab900f190c00a52d804232ceb981bf8cbeadeaf2503b19dbfc2581022e81146fc70e5d0e83f
TLSH
T1CAC0801DA500736792C004919B4DEFE7770F6361AFD3D51BD48DD020667197C5452CB3
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.pbxproj

SHA256 72a8562c9164da5ed340aa039a05e8f3fb7013d6812dce20cfb89e38bde45894
MD5 877b25de72c2c2dda7a84817eddd6bb6
SHA1 929856b4213a7a1c2e88df3b3ef7240a57dab045
SHA512 2715b80ae3f67cb913f7ed3b3a65b73283ec8129ab98290034b0f35021670852774089b1145c9d130cb2001f5ae16a39d53cfbf76fb95a5c6027ee47bf094f67
SSDEEP 192:pW+TFd+5swOa2LQ40I1Y2/FDVvkp6rKDOAtGoCIVdoCIMy6/6P9uGPuGB:L1UGspCIYCIF6/6v
TLSH
T18552226BA71C3127D6B41362F619DEE1321D433A5DE86CECCC86CC8425A885DC6FCE99
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/VMProtect Licensing Test.xcodeproj/project.xcworkspace/contents.xcworkspacedata

SHA256 8111deb2418df8a2dd557252a019dc13d006c0f73aa27b9230c085f0d39409ff
MD5 c77b2379ffdb2f66c050c75b154eaf06
SHA1 8c61870606025eaf0adf4058acb28dde23dd0012
SHA512 143f2a857d33e76d002c1cc58b551b7d7205d89885beaa63276d9134899177c84db8dc5d0a79174088c61703d9b140954cb1dfa4bae1e3ebfa0c8606017c0bf5
TLSH
T1BEC012795550773755A18E410B06C8046378514E20A44005A59F8A902F0521C83969D8
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/VMProtectLicense.ini

SHA256 c396fa69eae7c709abc1ac3669ee56f3fc5052211fc032e0ed05a7243b4a744d
MD5 9cfe4e0b6fe1396481307218c1cf746d
SHA1 286d2dd02313c458935ab74c0c5fc28ffc756457
SHA512 16792bcc57b6a454044df19ec25438490d200b7962fe7ab06f737d4ee6433ddd1405595523469a3e1fad89f963f69ffa21b48aeb1b5a9bc30ff8e59e83d194b2
TLSH
T15AC02B1056303080040015A028A45D03B562C23944C440F116D82BC402F3D51AD4C021
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/VMProtectSDK.h

SHA256 5ae64e0cefa96434ef0804bee24f7b44ad72752f43715078879eae63cc4b3d06
MD5 64ab2f27805198ef6a467f1184b3d047
SHA1 4cd368f133cffcf8b7e703517f10ac15738394bd
SHA512 f39eae6c50de129f64ded4b1d897c432523896ce2f8a234a86dec6d63750211559ab24698edd4927c0940e5e484310495b88c453994c8a62d7f132ab51d5da56
TLSH
T12871A1010D10206AE1A6D7E5272BDC5135ACF52335F2DCEF121675124BC318E6BAEA9F
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/en.lproj/Credits.rtf

SHA256 72bc66f32f1abda7f86defc32740ddca94fd138419ae56967ec6ac38042d678c
MD5 052b0fb29dd90c39f4270d7ab8cafab1
SHA1 2e4389b9fbdab0989ce7fd6d2a1b762920a3e78f
SHA512 7b3ecab0cee4832e0405b7a6fd8c0d86efd57eb47148b852aa9bd0c650430cc2f36c6528554612c09dca11a26d662603cb5fe84993ab27bcc80f418cc01b47a4
TLSH
T159C04CACE44204914AD6A16DB9CA823D5690A7857587CDA7545009506A5581A22D1C54
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/en.lproj/InfoPlist.strings

SHA256 feb5e820d68ed31f871d2bdaf8d14935ed343a7a875ddd774d5556da8dfd951a
MD5 b8f0b99a609bda18c49eed43bb052224
SHA1 8faaa0faa6cd692b602eb74340c754c739d5eaa3
SHA512 22b0c518333ab93a5078ff4e5ba56159855cf552b9566e07e30141b481c6d235b345eecf5d222a6f56e5d7c1587ab2c8b38e7bce4874873d411758d76583a885
MD5 SHA1 SHA512

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/en.lproj/MainMenu.xib

SHA256 c5c652e7d881d15cc71fc255f2e1b5fec88c49dea30c1253fcadf76b6120d937
MD5 b79e0af28e9473e7c1008d1e96dc5394
SHA1 ed07cc28a083d6f1b05a4d64917a0bd1c0dbbc78
SHA512 f4d8dc22171c3ff5bf55372033fe0461570a99763e88b0e8bc91f6759db7ac8778dbee65465b1499c4c14f950044f50ea3b008481c05bbbd2334e7487cc6400b
SSDEEP 384:luEAsxYGNN1SfWQiuCkKrgL9N3BCNwiLuDkl7CV7TfyVOntCky/LLkNqrYxHd7Ll:lnLwR2Lk214vmYUkJfuU
TLSH
T158E31A4316CEBC990AB3155F4FA15B09709F8C7D81A8A6A3B0F3CD5DED58FA0C42619B
MD5 SHA1 SHA512 SSDEEP TLSH

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/libVMProtectSDK.dylib

SHA256 baa60ef6c0d0a958816dbd5974a6201991df9a3cede3c359ff25f1e3e9d9ec29
MD5 df2b9db64b5d9f268303a44f1b7526da
SHA1 dc63f17a79d0bc08a985c4f9b1a8e9fc2bb698ad
SHA512 62a7a5a4f6f90b5fd0caf9c12cf0a9ef4653b61e0ac79b5ae3c874387b07e8ea9e6a58d9e01ead24b92eaeee38041150a98f004618803958eae95566454d4037
SSDEEP 768:TC3w0MnwZIIl1d4x02QsiURWO9aSIlpJ73IKaQTF19YR0WwMykBGetF1:0Knwzhz38D
TLSH
T12A33EA13EB05D466CA4E90B4969FCF3BB074F02064B3D763B751D6682FA67883E5250B
MD5 SHA1 SHA512 SSDEEP TLSH

macos arch:x64 arch:x86

VMProtect Lite 3.10.4/VMProtect/Licensing/Xcode/main.m

SHA256 7fbdca8de56751734d79207064bbcbaa7cf5e1d0193fc413fb86ffc9d6b940b0
MD5 1385fc11a69cdf8a9781d53b35b6d7dc
SHA1 4409daaff15be966f18da09c96fb9a7146b4236e
SHA512 29f79fed54306a15e1e3faadd0a0bbb05500e68f05bf4f44cdea17560a98aae584d8e83878c092e8af5f5732385612fe22dd525d53895ecb80670f4546814869
TLSH
T18FD02B9510F51953CFD1926B9C939B467212B806F6F9A453468A90015E61C7530A0407
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Scripts/Delphi Resources/Project1.exe

IMPHASH 1e7575186edecf060e4585f8bc74203f
SHA256 a14c1e75ce36821ecd80e4525c888c9d58e80a23a8a5f6ebe9923f6a33d93e7d
MD5 fcdd67939f856f8bcfc404bb5f706ec7
SHA1 758d14e6d838e12d2c1e52f65594a91dbe744f4b
SHA512 18be594c08513e005840d9af00174edb021fda635e5331528310f72fcfce20938edef99965ccf0039ec0283500239642bb6ff6809ef797c79f6c4c5ba1a6aff2
SSDEEP 24576:FiRfWQHP2VPwHgzDe/EMdwBmSPk96vBL/5YSnrnS:AWHPISVZ9YSrnS
TLSH
T151156C13B392173FC136163AC96792A05C3B7A102E965856DFF4CD8C1FF92A12C3AA57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

769096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

oleaut32

SysFreeString SysReAllocStringLen SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound SafeArrayCreate VariantChangeType VariantCopy VariantClear VariantInit

advapi32

RegQueryValueExW RegOpenKeyExW RegCloseKey RegUnLoadKeyW RegSetValueExW RegSaveKeyW RegRestoreKeyW RegReplaceKeyW RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegLoadKeyW RegFlushKey RegEnumValueW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegConnectRegistryW RegCloseKey

user32

LoadStringW MessageBoxA CharNextW CreateWindowExW WindowFromPoint WaitMessage UpdateWindow UnregisterClassW UnhookWindowsHookEx TranslateMessage TranslateMDISysAccel TrackPopupMenu SystemParametersInfoW ShowWindow ShowScrollBar ShowOwnedPopups SetWindowsHookExW SetWindowTextW SetWindowPos SetWindowPlacement SetWindowLongW SetTimer SetScrollRange SetScrollPos SetScrollInfo SetRect SetPropW SetParent SetMenuItemInfoW SetMenu SetForegroundWindow SetFocus SetCursorPos SetCursor SetClipboardData SetClassLongW SetCapture SetActiveWindow SendMessageA SendMessageW ScrollWindow ScreenToClient RemovePropW RemoveMenu ReleaseDC ReleaseCapture RegisterWindowMessageW RegisterClipboardFormatW RegisterClassW RedrawWindow PostQuitMessage PostMessageW PeekMessageA PeekMessageW OpenClipboard OffsetRect MsgWaitForMultipleObjectsEx MsgWaitForMultipleObjects MessageBoxW MessageBeep MapWindowPoints MapVirtualKeyW LoadStringW LoadKeyboardLayoutW LoadIconW LoadCursorW LoadBitmapW KillTimer IsZoomed IsWindowVisible IsWindowUnicode IsWindowEnabled IsWindow IsIconic IsDialogMessageA IsDialogMessageW IsChild InvalidateRect IntersectRect InsertMenuItemW InsertMenuW InflateRect GetWindowThreadProcessId GetWindowTextW GetWindowRect GetWindowPlacement GetWindowLongW GetWindowDC GetTopWindow GetSystemMetrics GetSystemMenu GetSysColorBrush GetSysColor GetSubMenu GetScrollRange GetScrollPos GetScrollInfo GetPropW GetParent GetWindow GetMessagePos GetMessageExtraInfo GetMenuStringW GetMenuState GetMenuItemInfoW GetMenuItemID GetMenuItemCount GetMenu GetLastActivePopup GetKeyboardState GetKeyboardLayoutNameW GetKeyboardLayoutList GetKeyboardLayout GetKeyState GetKeyNameTextW GetIconInfo GetForegroundWindow GetFocus GetDesktopWindow GetDCEx GetDC GetCursorPos GetCursor GetClipboardData GetClientRect GetClassLongW GetClassInfoW GetCapture GetActiveWindow FrameRect FindWindowExW FindWindowW FillRect EnumWindows EnumThreadWindows EnumChildWindows EndPaint EnableWindow EnableScrollBar EnableMenuItem EmptyClipboard DrawTextExW DrawTextW DrawMenuBar DrawIconEx DrawIcon DrawFrameControl DrawFocusRect DrawEdge DispatchMessageA DispatchMessageW DestroyWindow DestroyMenu DestroyIcon DestroyCursor DeleteMenu DefWindowProcW DefMDIChildProcW DefFrameProcW CreatePopupMenu CreateMenu CreateIcon CreateAcceleratorTableW CopyIcon CloseClipboard ClientToScreen CheckMenuItem CharUpperBuffW CharNextW CharLowerBuffW CharLowerW CallWindowProcW CallNextHookEx BeginPaint AdjustWindowRectEx ActivateKeyboardLayout

kernel32

lstrcmpiA LoadLibraryA LocalFree LocalAlloc GetACP Sleep VirtualFree VirtualAlloc GetSystemInfo GetTickCount QueryPerformanceCounter GetVersion GetCurrentThreadId VirtualQuery WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpynW LoadLibraryExW IsValidLocale GetSystemDefaultUILanguage GetStartupInfoA GetProcAddress GetModuleHandleW GetModuleFileNameW GetUserDefaultUILanguage GetLocaleInfoW GetLastError GetCommandLineW FreeLibrary FindFirstFileW FindClose ExitProcess ExitThread CreateThread CompareStringW WriteFile UnhandledExceptionFilter RtlUnwind RaiseException GetStdHandle DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle TlsSetValue TlsGetValue LocalAlloc GetModuleHandleW lstrcpyW WriteFile WideCharToMultiByte WaitForSingleObject WaitForMultipleObjectsEx VirtualQueryEx VirtualQuery VirtualFree VirtualAlloc TryEnterCriticalSection SwitchToThread SuspendThread SizeofResource SignalObjectAndWait SetThreadPriority SetThreadLocale SetLastError SetFilePointer SetEvent SetErrorMode SetEndOfFile ResumeThread ResetEvent ReadFile RaiseException IsDebuggerPresent MultiByteToWideChar MulDiv LockResource LoadResource LoadLibraryW LeaveCriticalSection InitializeCriticalSection GlobalUnlock GlobalLock GlobalFree GlobalFindAtomW GlobalDeleteAtom GlobalAlloc GlobalAddAtomW GetVersionExW GetVersion GetTickCount GetThreadPriority GetThreadLocale GetStdHandle GetProcAddress GetModuleHandleW GetModuleFileNameW GetLocaleInfoW GetLocalTime GetLastError GetFullPathNameW GetExitCodeThread GetDiskFreeSpaceW GetDateFormatW GetCurrentThreadId GetCurrentThread GetCurrentProcessId GetCurrentProcess GetCPInfo FreeResource InterlockedExchangeAdd InterlockedExchange InterlockedCompareExchange FreeLibrary FormatMessageW FindResourceW EnumCalendarInfoW EnterCriticalSection DeleteCriticalSection CreateThread CreateFileW CreateEventW CompareStringW CloseHandle Sleep

msimg32

AlphaBlend

gdi32

UnrealizeObject StretchDIBits StretchBlt StartPage StartDocW SetWindowOrgEx SetWinMetaFileBits SetViewportOrgEx SetTextColor SetStretchBltMode SetROP2 SetPixel SetEnhMetaFileBits SetDIBits SetDIBColorTable SetBrushOrgEx SetBkMode SetBkColor SetAbortProc SelectPalette SelectObject SaveDC RoundRect RestoreDC Rectangle RectVisible RealizePalette Polyline Polygon PolyBezierTo PolyBezier PlayEnhMetaFile Pie PatBlt MoveToEx MaskBlt LineTo IntersectClipRect GetWindowOrgEx GetWinMetaFileBits GetTextMetricsW GetTextExtentPointW GetTextExtentPoint32W GetSystemPaletteEntries GetStockObject GetRgnBox GetPixel GetPaletteEntries GetObjectW GetEnhMetaFilePaletteEntries GetEnhMetaFileHeader GetEnhMetaFileDescriptionW GetEnhMetaFileBits GetDeviceCaps GetDIBits GetDIBColorTable GetDCOrgEx GetCurrentPositionEx GetClipBox GetBrushOrgEx GetBitmapBits FrameRgn ExtTextOutW ExtFloodFill ExcludeClipRect EnumFontsW EnumFontFamiliesExW EndPage EndDoc Ellipse DeleteObject DeleteEnhMetaFile DeleteDC CreateSolidBrush CreateRectRgn CreatePenIndirect CreatePalette CreateICW CreateHalftonePalette CreateFontIndirectW CreateDIBitmap CreateDIBSection CreateDCW CreateCompatibleDC CreateCompatibleBitmap CreateBrushIndirect CreateBitmap CopyEnhMetaFileW Chord BitBlt Arc AbortDoc

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

ole32

OleUninitialize OleInitialize CoTaskMemFree CoTaskMemAlloc CoCreateInstance IsEqualGUID

comctl32

InitializeFlatSB FlatSB_SetScrollProp FlatSB_SetScrollPos FlatSB_SetScrollInfo FlatSB_GetScrollPos FlatSB_GetScrollInfo _TrackMouseEvent ImageList_GetImageInfo ImageList_SetIconSize ImageList_GetIconSize ImageList_Write ImageList_Read ImageList_GetDragImage ImageList_DragShowNolock ImageList_DragMove ImageList_DragLeave ImageList_DragEnter ImageList_EndDrag ImageList_BeginDrag ImageList_Copy ImageList_LoadImageW ImageList_GetIcon ImageList_Remove ImageList_DrawEx ImageList_Replace ImageList_Draw ImageList_SetOverlayImage ImageList_GetBkColor ImageList_SetBkColor ImageList_ReplaceIcon ImageList_Add ImageList_SetImageCount ImageList_GetImageCount ImageList_Destroy ImageList_Create

winspool.drv

OpenPrinterW EnumPrintersW DocumentPropertiesW ClosePrinter GetDefaultPrinterW

vmprotectsdk32

VMProtectDecryptStringA VMProtectEnd VMProtectBegin

Name

.text

Size

741KB

Virtual Size

741KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

1024B

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

60B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

67KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

50KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/VMProtect/Scripts/Delphi Resources/Project1.exe.vmp

SHA256 899ecd161257e94baae4c7ff699563d8292dd496cace8911bb4bb52deaa5576b
MD5 17618d245dd6def511cceeca5f19202d
SHA1 ddfeed890dc23995277d13308f3d4bd36085a3a1
SHA512 42229cb6ec38176981d727a1a26f83209fc8cd334dfee8b4bd006a7c99c1dd973f4a56d900d3a3e4f2fa225ceacbcce5e40aa3046d570559c129721affb4e85a
TLSH
T13611100869F9BA4445F224F869A5E9407EA452D3037C0799F0EC81749F9094FC6FBBA3
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Scripts/Environment Variables/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect Lite 3.10.4/VMProtect/Scripts/Environment Variables/Project1.exe.vmp

SHA256 6403d19a23049cb00afec44bd0c24fd6c2edad511d6d6e060d4bf114a6e7f47a
MD5 684acdecd2e8e529df66ecaaf7a6a41c
SHA1 7a9dfcc9713a459e578ad5c1f7957376ff26612f
SHA512 3f901e704e002fb532e2194286f642ec45ad866918d38332e678798962f61ee882a4e87818d7808474add704d6c996a8efdb0db6647024ce203a52731f325942
TLSH
T1EE01990896F8FA0102EA50E43594EA81AEE083D303690A8872ECD7E80F4D51087DB6A2
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Scripts/External DLL/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect Lite 3.10.4/VMProtect/Scripts/External DLL/Project1.exe.vmp

SHA256 5eadc73b9e22f47bc402612fd35964b9184c98c8819c7a7bd8d46cf359c38a57
MD5 09b037afd91f09fc153a6eaa67764bd5
SHA1 f438ad53cb4e77c13455d7caf6dc729d15ab42a8
SHA512 123074974f143cd3c7287be557c0898fe4a79975dfb7c33290d6a43b5db6509d66b5cc84b2251faf819abc82dfa0d975ea08db3760a98aa73d290ad819930fde
TLSH
T10E11000CE1B47D4804E311A03FD1FA50ACF491C3433A0686F5ED81D50F2A895C3A7AF6
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Scripts/Random Section Names/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect Lite 3.10.4/VMProtect/Scripts/Random Section Names/Project1.exe.vmp

SHA256 5cb657fd26e2d6f2f8d00e3802947a5a2454dc174593daab1d776aa33e582919
MD5 217389fb2228f338f779b8e4f73c9a43
SHA1 4d3ea5397894601be5f65e1f938d02e826ae3dad
SHA512 89cffe0100454f8d7d7b7e4891daa7158da1d86ab1906bf2a1585d01887eb695afca7b46ae3fa254dcbf1ffac861f7c43d729c532690c160fca39b0bc14fc7b6
TLSH
T1FA11E1186AE1A50115A314B012D59D84BDF092E3032D0A94B0DC91685F2ACAE57F7AFB
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/VMProtect/Scripts/Script Events/Project1.exe

IMPHASH 8fbba78ee3fc992258b0d48632a5a024
SHA256 7e90ae83789d2a44ec9c5ee5b38586e5898dcbfefb0e754af6fd0720eea21dde
MD5 a3741eebfb4ee6623dd3ea2561f6ac3b
SHA1 2507c8fdfd7024aec855e40dfc7b3d01afbb9568
SHA512 495d138ea41b198ca1518fedccbde57d6748df511bd4230188cce4d5a81d415fe20298dfac837dcce54ba3f7f61f0244e8d09a856fcfc12f51a3c6fb0e34bd07
TLSH
T17F512DD3C59048A6D2D48F7B23E38CD4FDAA422412799E1D1B970985D131E53DA2E74B
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

VMProtect Lite 3.10.4/VMProtect/Scripts/Script Events/Project1.exe.vmp

SHA256 f2a274c17ab215db1aa9d0f6a095800c5ba1253e5e865e3615926346c348aa04
MD5 a4f9d4c070b1bcd364b7c456b7b87c2c
SHA1 cf4ccc1d339e1d923a567220c83160b384f77431
SHA512 55f65f99e4183a9eb2f266f08db509b60dc4ce954b03742fabd182f5a71877312d9542300ac48008736e424092ff8e3085dafba2387a823486a1aa565284f150
TLSH
T1C601F44C61BCAA4001E741A41BA6DD81DCF282E3036A079879DCD3980F364058B937F6
MD5 SHA1 SHA512 TLSH

VMProtect Lite 3.10.4/hola_mundo_x64.exe

IMPHASH edb5edbbda41fd2d6c4b4473cbe93608
SHA256 e7f127cf673e268cfbb49290630b16ee51e22c19345c0e5ffd0e2fbe441cc95a
MD5 04718c4178cbcc9ed8e1294d47d1e0f5
SHA1 320c2a94e8b5c11b1c5462cf7f1be52ca544a1d9
SHA512 8f5e173ebcfde4c5c8d6a715fa7632ebe8151ffbb954ac5c7f4ee0e75b9ce0ee6034665e1fffe551ac07e9c1b340dd5632b731ec0b2a037f1f5b8e1cf001d968
SSDEEP 1536:PrFvxeywQa9YFQxPqn9t12dtM/1tr6IbDLTQBrxx/61K8z7rCqTTL:PRv47Ib31KML
TLSH
T153C319C6BAC6EDEBC905423584B743192378F7C50BC69B034D39A2351E676F06E8B64B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

552B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

384B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

44KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1024B

Virtual Size

707B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

512B

Virtual Size

450B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

VMProtect Lite 3.10.4/hola_mundo_x86.exe

IMPHASH f8157fd625c14dc069140a3839398206
SHA256 daf8908fba5a2f44c3668a3c947eda95b4ea6332145cd33379fbcc20735af9fa
MD5 dc34f0db8bf8195bdcf8fbce6f14d077
SHA1 a2c2d7d20ab396849465dbdd6d4aa52e89d00768
SHA512 b09e4104ab46ed343308902bff7ed1267858be9baae7e400bf179ba7113fd5a43f41c9e9b337159a0bc7c6f6740c2f1d2f94da502cf56c4737ef96e0462cf6ac
SSDEEP 1536:NZGH0tUYney5z9mSr3ScWO9kaqYGJ5/MmM8hSjaROtoli:VB2eq7i
TLSH
T1D6B32983FA86FD67CA15023E89FA8329223DF7D507C69B034D7565302A5B1E0AE97607
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

/4

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

184B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

8B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

588B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/14

Size

1024B

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

1024B

Virtual Size

707B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/78

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/94

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/110

Size

512B

Virtual Size

428B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer