[Hackers]

Hello, today I will be compiling a history of this software. As you will see, it has been sold by countless users, involved in disputes, and yet... continues to be sold. Please keep in mind that it is not against HF rules for a proxy seller to sell software, even if that software was the focus of disputes resulting in a previous seller (or the software owner) being closed. This thread is intended to be a comprehensive record of the software. All mentioned users and threads are for reference.

2013 - Royal ! references Elad, and Mark (now removed threads)
https://hackforums.net/showthread.php?tid=3732932
Mark's threads are removed, but supposedly the original ByteCrypter.
The reason I am starting with this is because Elad was heavily involved with the software that came to be known as EveryCrypter & AegisTools, as documented in these threads here:
https://hackforums.net/showthread.php?tid=6262966
https://hackforums.net/showthread.php?ti...442&page=2



For reference, I want to point out that Elad's Code Protector shares many similarities with the GUI of Bytecrypter, but instead of a left-side menu , it uses the top tabs. Furthermore, AegisTools has Code Protector in the source code. I don't want to mix topics too much, but check out those threads and keep reading this one. There's a good chance there are more "coincidences" than I know about at this time. You can also see n0$f3ratu$ in that thread, who was also involved in the early dev. Please keep in mind this does not mean these users are scammers - but they were involved in the dev for these crypters early on.



2014 - SIM-2362145 Loves ByteCrypter - Made by Royal !
https://hackforums.net/showthread.php?ti...id44186088
https://i.ibb.co/Sn1CMMd/Screenshot-2024...141330.png

He also vouches for ByteCrypter in these threads too:
https://hackforums.net/showthread.php?ti...id43251150
https://hackforums.net/showthread.php?ti...id42325993

Oh by the way, we know about bigbronlet.




Who might just be Royal ! ...
How do you answer this one SIM-2362145 ? Just another "weird coincidence" ?

---

"coincidentally" bigbronlet is being lined up to have another version of the crypter (aegis) :



2015 - DeluxeCrypt by DeluxeSoftware
https://hackforums.net/showthread.php?tid=4942922

---

2016 - DiverseBasic by Miki
https://hackforums.net/showthread.php?tid=5139918

---

2016 - ByteCrypter by Royal !
https://hackforums.net/showthread.php?tid=5130184

---

2017 - ByteCrypter by Royal !
https://hackforums.net/showthread.php?tid=5764686

---

2022 - DeepWeb offers customer service / support to ByteCrypter scam victim
https://hackforums.net/showthread.php?tid=6212255

We can see here that Sanel, the victim, then does a deal with Royal

---

2023 - Customer asks for support with Byte Protector V3
https://hackforums.net/showthread.php?tid=6248474

---

2023 - SIM-2362145 creates a sales thread for ByteCrypter (closed/edited)
https://hackforums.net/showthread.php?tid=6257010

---

2023 - gangushbo asks about buying 2017 version
https://hackforums.net/showthread.php?tid=6257749

---

2023 - gangushbo ByteCrypter sales thread
https://hackforums.net/showthread.php?tid=6258084

---

2023 - SIM-2362145 offiicially sells ByteCrypter
https://hackforums.net/showthread.php?tid=6260700

BaitCrypter is also using aegistool license system. It literally sends requests to aegistool domain and server.

Any buyer can easily verify that.

[THE RULER]

excellent waste of time

[Hackers]

excellent waste of time

Thanks for your HQ post. But yeah, this is taking up too much time. I hope this thread is helpful if anyone wants to chime in.

Also, I need to make it clear again that SIM-2362145 is an approved seller / apparently the current owner of ByteCrypter. I am not saying he is a multi-account or scammer. AFAIK he purchases old software to resell. I am just putting together a history of these sales for reference.

[SIM-2362145]

Dear i really appreciate you working day and night to keep hf people aware of everything.

However, few points i got to clear up.

1: ByteCrypter did change hands twice however it never was reskinned to any other crypter or name changed. ByteCrypter always remained ByteCrypter throughout the entire years it was on sale. The name NEVER CHANGED.

2: ByteCrypter was launched in 2011. I researched myself on ByteCrypter. You can still find those threads if you use wayback archive machine website. Even if you do a Google search you will be able to see old bytecrypter versions in Google images, kindly go and check.

Even in the years when your so called Diverse Crypt and Deluxe Crypt and Code protector etc were launched, even during those years, ByteCrypter was ACTIVE on HF with name ByteCrypter. So no sense in making any connection between these.

3: The other software you named like Diverse Crypt Deluxe Crypt and more they or their sellers are in no relation to ByteCrypter.

For example, diverse crypt has auto it and vb6 stubs available whereas bytecrypter NEVER had that option.

Other like Deluxe Crypt has ANTIS feature available and some other features which ByteCrypter did not had.

Even some of the injection features have the differences to them.


I have seen your other threads as well.

Some of your points for example against that neon_light aegis guy some of your points maybe valid. I am not saying you are fully wrong.

However, in some points you are going overboard really.

Just because you find some similarities in the GUI of some crypters, does not ALWAYS mean that those crypters are related to each other.

That GUI was posted by user named Mephobia on HF and later on was heavily used by many sellers in their software or tools. You can Google that GUI as well.


Thanks dear.

[Hackers]

Dear i really appreciate you working day and night to keep hf people aware of everything.

However, few points i got to clear up.

1: ByteCrypter did change hands twice however it never was reskinned to any other crypter or name changed. ByteCrypter always remained ByteCrypter throughout the entire years it was on sale. The name NEVER CHANGED.

2: ByteCrypter was launched in 2011. I researched myself on ByteCrypter. You can still find those threads if you use wayback archive machine website. Even if you do a Google search you will be able to see old bytecrypter versions in Google images, kindly go and check.

Even in the years when your so called Diverse Crypt and Deluxe Crypt and Code protector etc were launched, even during those years, ByteCrypter was ACTIVE on HF with name ByteCrypter. So no sense in making any connection between these.

3: The other software you named like Diverse Crypt Deluxe Crypt and more they or their sellers are in no relation to ByteCrypter.

For example, diverse crypt has auto it and vb6 stubs available whereas bytecrypter NEVER had that option.

Other like Deluxe Crypt has ANTIS feature available and some other features which ByteCrypter did not had.

Even some of the injection features have the differences to them.


I have seen your other threads as well.

Some of your points for example against that neon_light aegis guy some of your points maybe valid. I am not saying you are fully wrong.

However, in some points you are going overboard really.

Just because you find some similarities in the GUI of some crypters, does not ALWAYS mean that those crypters are related to each other.

That GUI was posted by user named Mephobia on HF and later on was heavily used by many sellers in their software or tools. You can Google that GUI as well.


Thanks dear.

I have noticed that you like to call everyone 'dear' and if I was going to accuse you of being a multi, I might say that seems like you are trying too hard or that's part of your new persona, to act like a brand new person - that's how it may come across anyways, but I know you're an approved seller of ByteCrypter.

Thank you for acknowledging that the software does indeed go back all the way to 2011. Since that time it's been involved in a number of account closures and incidents.

I think you're right that a GUI doesn't mean it's the same. However, plenty of other similarities -ownership changing hands, thread designs, payment methods, talking styles, and a level of arrogance that expects us to deny evidence on a whim because you claim it's false.

I can't prove it ,but wouldn't be surprised to know you paid these 2 users to do some thread and GUI redesign work for you on this, to go from Protector back to Crypter. Regardless, you had contracts with them and then they vouched for you originally.


If you can prove what you're saying by supplying the source for trusted ubers to review it and confirm it's completely unique and not related to the other tools, then okay, but from the outside looking in, I don't see many differences.

I appreciate your thoughts, but there's a very clear history here that shows you are wrong. Byte Protector, Byte Crypter, etc. You're saying it never went by a different name, and yet just last year it was going by a different name.

Anyways, as always, I appreciate everyone's opinion, even yours.

-----

As for aegis connection. I think seeing how scarface, n3onight, marvid, and a few other lesser known accounts were all in the same threads, on the same software, etc is very telling. There is a clear point in time where you can see how bytecrypter, code protector, and others "forked".

I wasn't going to post this, but maybe this helps. I obviously can't prove that N3onight is neon_light, but sure is strange that two neons both were involved with this software, both in present, and in beginning. I think at some point around this time there was a fork into what we can call "left sidebar crypter" and "top menu crypter".





N3onight had this one here, BetaCrypt:
https://hackforums.net/showthread.php?tid=4057889

---

By the way, for the similarities. One of the ways I found 5 of these softwares was searching for the color code "#1E90FF" on the forums to see all the crypter sellers using that dodgerblue color in their thread text. Weird coincidence...

---

Also, while I'm doing this, here's another example of a top menu code protector

[Hackers]

ByteCrypter is also using aegistool license system. It literally sends requests to aegistool domain and server.
Any buyer can easily verify that.

This to me is more telling than most of the others. There's clearly a connection, whether SIM-2362145 wants to acknowledge it or not.
But since he wanted to mention bytecrypter being original, back to 2011, I dig more digging and dug up this too:





Also, because SIM-2362145 wanted to mention how he bought up Topher - Let's take a look at those similarities shall we?



He mentioned that here when he said he is now the seller of BytesCrypter, just like he did with Topher:


Also I am wondering why none of you crypter devs is able to vertically align a minus sign. All of your subtract/minus icons for minimizing are on the bottom of the button, not centered (vertically) inside of the button. Pretty consistent GUI mistake that's easy to fix that shows up everywhere. Just another weird "coincidence".

-----

Let's keep going because you wanted to defend yourself, so I feel the need to make sure you have a fair chance to answer to my claims.


V3 by Royal !

here's a video of your super modern software functioning the same way 5 years ago:
https://www.youtube.com/watch?v=CETXBDRGRRQ

and another: https://www.youtube.com/watch?v=hiBv_hEG2wA

here is one from 9 years ago, but might be completely unrelated / just using same name:
https://www.youtube.com/watch?v=K_uyNqbzPdw

This one looks similar too, again on the top tab. I know crypters will all be similar, but come on ... this is ridiculous. The amount of coincidences are just stupid at this point. At worst you guys are responsible for all this yourself, and at best you have no control over your own code/IP and are letting other people reskin and sell it. Either way, it's essentially valueless software at this point.



----

For anyone else that wants to do more digging, here are some other crypters that show similarities that didn't make it to any of my threads (yet) :
https://imgur.com/a/F5qJlNR

----

I can keep going if you want me to.

On page 115 of this PDF, you can see Tesla Crypter:
https://www.virusbulletin.com/uploads/pd...VB2015.pdf

[Hackers]

Royal ! / gangushbo / Eladictocosy / neon_light / bigbronlet / SIM-2362145 / more names for sure / - For me this is clearly the same guy.

- they are all vouching for each other using HF contracts
- they are all selling similar non-working crypter, just slightly different GUI
- they are all getting complains in their threads
- they are all deleting their own posts to hide the complains
- they even copy and paste the same posts:



here are more vouches from bigbronlet about bytecrypter:
https://imgur.com/a/b5E70gW

Never seen such a happy "customer" feel the need to spam so many threads with vouches about this.





Either the grey is just here to make fake complaints and bigbronlet is good to ignore him, or this poor grey user has a genuine complaint.
It's not my place to decide that, but you can see here how that scenario is treated.

[SIM-2362145]

How is bytecrypter using aegis licensing system prove that i am related to neon_light?. How?

That is just a licensing system that is used by many other software sellers to license and sell their software.

ByteCrypter has used various other licensing system as well till now including netseal and

961api https://hackforums.net/showthread.php?ti...ght=961api

does that make me related to netseal and 961api guys as well?

And ANY old BYTECRYPTER customer can verify this easily that bytecrypter used those licenses system in the past

So that is just pure nonsense logic

To answer your other claim, BYTECRYPTER always remained ByteCrypter. There was NEVER any name like Byte Protector, where is that name proof? Where is proof that byte was being sold as Byte Protector instead of ByteCrypter? never happened any such thing

Two graphic designers you taken names off, i buyed graphics from them, nothing else. I did not pay them to change bytecrypter to anything.

I paid them to make for me new sale thread design and signature design and nothing else, and you can contact them yourself to verify this if you want.


You keep searching for old crypters and trying to match their gui with currently sold crypters, that is pretty easy way to blame someone based on little coincidences of the GUI i really wish those old crypter sellers which you keep digging and posting about, i really wish those old sellers would still be active on hf and they then would have proved your accusations false by themselves

about your vouches claim, people on hf purchase other products and do leave good reviews on their sale topics if they liked those products, that is a general practice and if i used and vouched for a certain product, i did vouch for many other products as well, so that does not again prove anything

last thing, i am not related to any other person on hf not to neon_light neither to anybody else and this is on staff to confirm, not on you two, you two try to join unrelated dots which are not even related and then making assumptions and blind shots


this was my only more response to this thread that is nothing more but full of assumptions

Thank you

[Hackers]

Your latest customer review:

Using byte crypt actually increased my detection rate for an otherwise easy to crypt file. Not sure if im doing something wrong but I tested it 3 times ensuring to follow EXACTLY the very tedious instructions included with the product. While it has always been required (since 2012) to use multiple programs in this product, you are now required to run 3 extra obfuscators on top of the ByteCrypter program itself. After testing three times I was not only given an increased detection rate every time but not able to bypass even WD. Below are my (best) results.

Results Before Crypting:
https://www.kleenscan.com/scan_result/ce...f46eeee514

Results After Crypting:
https://www.kleenscan.com/scan_result/56...723082794a

RE: ByteCrypter v3 |Startup |Persistence |USG |x86/x64 |MultiBinder |Manual Image Mapping

---

What do you mean Byte Protector was never a thing?
It was Byte Protector v3 being sold by grilledservices on HF before you were even selling it boy:



Perhaps you're just trying not to sound too much like Data Protector because it's oddly similar. They were arrested Nov 18-21, 2020 for CyberSeal, CyberScan, and Data Protector. I can understand why you wouldn't want to be associated with "Protector".

You realllllly don't remember it being called Byte Protector? I could have your previous customers come vouch for me if you'd like... let me know bud.



Are you REALLY f'n sure my dude? Because you sold it with ByteProtector.exe in the last week, so your memory must be shot.
Here's a screen for you of that. You can clearly see the Aegis "licensing" running, as well as Byte PROTECTOR. This was taken just last week.

---

The problem with you is that you'll never admit defeat. You'll share lies that smell of bologne, salami selemani chorizo, etc. And yet I haven't even shared everything I have on you. This story isn't over, but glws buddy

[OldHeadDev]

Very good investigative work

[Hackers]

Very good investigative work

thanks, you can see more here:
https://hackforums.net/showthread.php?tid=6264915

also check out these raids /arrests on crypter teams:
2017 - https://www.bleepingcomputer.com/news/se...r-service/
2018 - https://www.bleepingcomputer.com/news/se...e-scanner/
2020 - https://www.zdnet.com/article/two-romani...-services/

Soon I'll share a thread that clearly shows how these crypters were sold continually, even as their owners were arrested. I don't know yet if this means the same sellers sold them or if people stole the software, but those 3 links should be enough for anyone to get started.

Go look at the software made by these 3 users (data protector, cyberscan / cyber seal + more)

n0$f3ratu$
JustNothing
Cyber Coder

Then go look at the software that came after, and before.
It's all related :) I will write a new thread soon w/ more info but don't have enough time right now.