Different results between GUI DiE and CLI diec
Author: sy6sy2Created May 5, 2026Updated Jul 28, 2026
Labelsbug
When using DiE in GUI mode on a specific file I obtain this result (with default settings):
PE64
Operation system: Windows (Vista) [AMD64, 64-bit, GUI]
Linker: Microsoft Linker (14.44.35221)
Compiler: Microsoft Visual C/C++ (19.44.35221) [LTCG/C++]
Language: C++
Library: Direct3D (9)
Tool: Microsoft Visual Studio (2022, 17.14)
Protector: VMProtect (new) [DS]
(Heur) Protection: Generic [Strange sections]
(Heur) Packer: Generic [Section names repeating + Section #7 ("") compressed + Section #0 (".text") has wrong offset and size + High entropy]
Debug data: Records [pogo]If I want to obtain the same result using diec with flags that mimic the default GUI settings (diec -rdub foo.exe) I obtain this result:
PE64
Operation system: Windows(Vista)[AMD64, 64-bit, GUI]
Linker: Microsoft Linker(14.44.35221)
Compiler: Microsoft Visual C/C++(19.44.35221)[LTCG/C++]
Language: C++
Library: Direct3D(9)
Tool: Microsoft Visual Studio(2022, 17.14)
(Heur)Protection: Generic[Strange sections]
(Heur)Packer: Generic[Section names repeating + Section #7 ("") compressed + Section #0 (".text") has wrong offset and size + High entropy]
Debug data: Records[pogo]As you can see, the line Protector: VMProtect (new) [DS] is missing and I don't understand why. I tried multiple flags but without success.
DiE version : 3.21 (tried on macOS and Linux)
Thank you
Source: horsicq/Detect-It-Easy