Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-24-2020, 08:27
Turkuaz Turkuaz is online now
Family
 
Join Date: Sep 2017
Posts: 129
Rept. Given: 1
Rept. Rcvd 6 Times in 3 Posts
Thanks Given: 26
Thanks Rcvd at 133 Times in 46 Posts
Turkuaz Reputation: 6
Cant not hide debugger for Themida/Winlicense 3.X

Hello all,
I am working on a programme protected by themida.
Previous version of the programme is protected by themida 2.x according to DIE, current version is protected by themida 3.x

Old version is debuggable with x64dbg by enabling ScyllaHide.
But new version detects the debugger.
So this means that themida 3.x relies on new technique(s) on detecting debuggers.

Does anybody know this new technique and how to bypass it?

Regards
Reply With Quote
  #2  
Old 09-24-2020, 14:50
user1's Avatar
user1 user1 is offline
Family
 
Join Date: Sep 2012
Location: Romania
Posts: 837
Rept. Given: 422
Rept. Rcvd 113 Times in 61 Posts
Thanks Given: 487
Thanks Rcvd at 444 Times in 268 Posts
user1 Reputation: 34
have tried SharpOD x64 plugin?
Reply With Quote
  #3  
Old 09-24-2020, 17:15
Turkuaz Turkuaz is online now
Family
 
Join Date: Sep 2017
Posts: 129
Rept. Given: 1
Rept. Rcvd 6 Times in 3 Posts
Thanks Given: 26
Thanks Rcvd at 133 Times in 46 Posts
Turkuaz Reputation: 6
Quote:
Originally Posted by user1 View Post
have tried SharpOD x64 plugin?
Yes, I have tried it too
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 15:56.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2020 )