TitanHide Blue Death Screen

[Hadedx9]

hello Friends
Is There any Solution For Blue Death Screen Caused By Starting TitanHide Service , The TitanHide.sys Can Be Loaded In the Memory But The Windows Shows The Blue Death Screen When Starting It ,
I have Tried every Possible Solution and this is the result:
1- On Windows 7 Ultimate SP1 x32 it is loading and the windows accept to start it but after 30 seconds the blue death screen appears this for the TitanHide version 9 and Previous Versions and it not accepting to be loaded in the next versions ,
2- On Windows 7 Ultimate SP1 x64 it is not accepting to start any version of TitanHide (the Blue Death Screen)
3- On Windows XP Proffessional SP3 It accepts to start all the old versions (the Supported versions)
- i Have Enabled Test mode before any attempt to start the service on every OS mentioned here and I Have Tried every Possible tool from Github , Tuts4You ,AT4RE, etc and Tried To Disaple PatchGuard But With No Good result.
So , Anyone Can Help ?

[niculaita]

send sys file to sign it

[tame_mpeg]

I have made use of this for TitanHide before.
https://github.com/thesecretclub/SandboxBootkit
I don't know if it still works with the latest versions of Windows Sandbox but it was very easy to use, maybe give it a go

[Hadedx9]

Originally Posted by niculaita

send sys file to sign it

Thanks,
There it is :
https://www.mediafire.com/file/cklvsprwcx8r4p9/x64.rar/file

[Hadedx9]

Originally Posted by tame_mpeg

I have made use of this for TitanHide before.
https://github.com/thesecretclub/SandboxBootkit
I don't know if it still works with the latest versions of Windows Sandbox but it was very easy to use, maybe give it a go

Thank you ❤️
but does it work on VMWare?

[niculaita]

https://www.mediafire.com/file/xa7axq5rftsti4y/x64_resigned.rar/file try
but before merge reg, import certif, disable check revocations, Uninstal KB5083769 and restart PC

[Hadedx9]

Originally Posted by niculaita

https://www.mediafire.com/file/xa7axq5rftsti4y/x64_resigned.rar/file try
but before merge reg, import certif, disable check revocations, Uninstal KB5083769 and restart PC

Thank you❤️
But How to disable check revocations ?
KB5083769 is for windows 11, but i am working on Windows 7 Ultimate SP1 x64 so what i should do before start the service for the Windows 7 OS?

[Hadedx9]

Originally Posted by Hadedx9

Thank you❤️
But How to disable check revocations ?
KB5083769 is for windows 11, but i am working on Windows 7 Ultimate SP1 x64 so what i should do before start the service for the Windows 7 OS?

EDIT :

i have done every thing that written in the "readme.txt" and i have uninstalled these two updates on windows 7 SP1 x64 (KB3033929 , KB4474419),
and i have enabled test mode before starting the service but the same Blue Death Screen still appears ,

So Is there somethng else i should do?

[Sound]

try enter forced signature disabling mode .

[Hadedx9]

Originally Posted by Sound

try enter forced signature disabling mode .

Thanks ❤️ i will try it

[Hadedx9]

HI Again ❤️
i have tried a lot of solutions but it did not work if anyone has a solution ❤️

[kernel]

Originally Posted by niculaita

https://www.mediafire.com/file/xa7axq5rftsti4y/x64_resigned.rar/file try
but before merge reg, import certif, disable check revocations, Uninstal KB5083769 and restart PC

You better not adding the fake timestamp. Now windows will not load the driver. Without the fake timestamp there is a way to load.

[Hadedx9]

Originally Posted by Sound

lack of lock protection for driver read/write operations.
absence of exception protection when the driver's FindCaveAddress function scans kernel memory or other
enabling VT can also cause conflicts and lead to BSOD occasionally.

There are various causes leading to BSOD. Even if you have entered Windows Test Mode and bypassed PG restrictions,
the most effective solution is to fix issues like those I mentioned in the source code.....

BTW：What do you use the TitanHide driver for?

I am trying to run it to hide my debugger from kernel mode Anti-Debugging Techniques

[Hadedx9]

Originally Posted by kernel

You better not adding the fake timestamp. Now windows will not load the driver. Without the fake timestamp there is a way to load.

I am Not Familiar to kernel drivers can you please make it Simple To my Knowledge

[Hadedx9]

Originally Posted by kernel

You better not adding the fake timestamp. Now windows will not load the driver. Without the fake timestamp there is a way to load.

How To load It without adding The fake timestamp?