VMProtect
Named by 5 kept items in this workspace.
2 items name it under tools, 1 under affected products, 1 under classification.key entities and 1 under classification.technologies.
Search every workspace for VMProtect. It matches the name as written, so it can find other things that share it.
The items that name it 5
PE32+ samples using compact rotating-XOR PACKER_INFO format
Commercial software protection tool abused by the attacker to pack libcef.dll and make malware analysis notoriously difficult for defenders.
Software protection/obfuscation analyzed (VMProtect 2)
All technologies in this workspace.