Exetools  

Go Back   Exetools > General > General Discussion

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-24-2020, 08:27
Turkuaz Turkuaz is offline
Family
 
Join Date: Sep 2017
Posts: 161
Rept. Given: 3
Rept. Rcvd 7 Times in 4 Posts
Thanks Given: 39
Thanks Rcvd at 136 Times in 49 Posts
Turkuaz Reputation: 7
Cant not hide debugger for Themida/Winlicense 3.X

Hello all,
I am working on a programme protected by themida.
Previous version of the programme is protected by themida 2.x according to DIE, current version is protected by themida 3.x

Old version is debuggable with x64dbg by enabling ScyllaHide.
But new version detects the debugger.
So this means that themida 3.x relies on new technique(s) on detecting debuggers.

Does anybody know this new technique and how to bypass it?

Regards
Reply With Quote
  #2  
Old 09-24-2020, 14:50
user1 user1 is offline
Family
 
Join Date: Sep 2012
Location: OUT
Posts: 1,041
Rept. Given: 547
Rept. Rcvd 120 Times in 67 Posts
Thanks Given: 695
Thanks Rcvd at 566 Times in 337 Posts
user1 Reputation: 41
have tried SharpOD x64 plugin?
Reply With Quote
  #3  
Old 09-24-2020, 17:15
Turkuaz Turkuaz is offline
Family
 
Join Date: Sep 2017
Posts: 161
Rept. Given: 3
Rept. Rcvd 7 Times in 4 Posts
Thanks Given: 39
Thanks Rcvd at 136 Times in 49 Posts
Turkuaz Reputation: 7
Quote:
Originally Posted by user1 View Post
have tried SharpOD x64 plugin?
Yes, I have tried it too
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Themida/Winlicense hobferret General Discussion 1 05-10-2013 18:44
How to hide debugger? deXep General Discussion 3 10-06-2005 07:04


All times are GMT +8. The time now is 17:49.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )