search

SabreTools / BinaryObjectScanner

C# protection, packer, and archive scanning library
MIT License
87 stars 13 forks source link

[New Protection?] Validate Key Xtra SubModule #108

Closed Flashfire42 closed 2 years ago

Flashfire42 commented 2 years ago

IS LIKELY A FALSE POSITIVE FURTHER TESTS AND SAMPLES NEEDED 17:07:42 | E:\PHEAD\xtras\budapi.x32 | Validate Key Xtra SubModule VirusTotal Link https://www.virustotal.com/gui/file/fa8334bdc13fc238c6d94f85ff48f7e4eb50172bf2339527d1daa6bf4f2f5ab8 MD5: 7ca9a5b38a26dabc825ca65e47277ab0 SHA-1: c06acd186dbd63109f1007a1dfe5a826015d063b SHA-256: fa8334bdc13fc238c6d94f85ff48f7e4eb50172bf2339527d1daa6bf4f2f5ab8

n0samu commented 2 years ago

I verified that neither the budapi.x32 (Buddy API) library nor the game's executable depend on any Validate Key Xtra. My conclusion is that ProtectionID has a faulty signature for the Validate Key Xtra protection. Buddy API and Validate Key Xtra are two entirely separate Macromedia Director Xtras; one does not depend on the other, and games can use one without using the other.