Skip to content

How to use SbieHideExLoader.exe / it does not work for me #7

@kolomeets80

Description

@kolomeets80

Whenever I'm trying to run a simple executable (no VMProtect), then it's immediately terminated. It doesn't matter if I put SbieHideExLoader.exe in sandbox or outside of sandbox. The excutable can be run just fine in sandbox if I do not use SbieHideExLoader.exe

This is my output:

C:\Downloads\SbieHideExLoader.exe D:\Sandbox\DefaultBox\drive\C\anytoiso_setup.exe

The core library is loaded at address 0x00000000004E0000.
Windbg debug command: .reload /f /i C:\Downloads\SbieHideEx.dll=0x00000000004E0000
Successfully started the child process!

This is my sandbox config:

Enabled=y
BlockNetworkFiles=y
RecoverFolder=%Desktop%
RecoverFolder=%Personal%
RecoverFolder=%{374DE290-123F-4565-9164-39C4925E467B}%
BorderColor=#00ffff,ttl,6,192
Template=AutoRecoverIgnore
Template=LingerPrograms
Template=BlockPorts
Template=qWave
Template=FileCopy
Template=SkipHook
Template=OpenBluetooth
ConfigLevel=10
CopyLimitKb=-1
NeverRemove=y
FakeAdminRights=y
NoAddProcessToJob=y
NotifyInternetAccessDenied=n
ClosedFilePath=!,InternetAccessDevices

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions