[xeinebiu]

Hello guys ...
In this thread I want to show you a method how to hide your process from TASKMANAGER ...

1. Open New Project
   


2. Import Libraries
   
   Code

   Imports System.Reflection
Imports System.Runtime.CompilerServices


3. Form_Load
   In Form_Load Event add this code :
   
   Code

   Dim s As New OpenFileDialog
s.ShowDialog()

Dim filesbytes() As Byte = IO.File.ReadAllBytes(s.FileName)
Dim x As New Threading.Thread(AddressOf RunFromMemory)
x.TrySetApartmentState(Threading.ApartmentState.STA)
x.Start(filesbytes)
me.close
   
   


4. Add this Sub
   
   Code

   Private Sub RunFromMemory(ByVal bytes As Byte()) 'not sure how it works :(
Dim assembly As Assembly = assembly.Load(bytes)
Dim entryPoint As MethodInfo = [assembly].EntryPoint
Dim objectValue As Object = RuntimeHelpers.GetObjectValue([assembly].CreateInstance(entryPoint.Name))
entryPoint.Invoke(RuntimeHelpers.GetObjectValue(objectValue), New Object() {New String() {"1"}})
End Sub
   
   

This Sub will be called and all bytes you chosed will be run in memory and will be invisible in PROCESS List in TASKMANAGER ...
You can import the bytes to Resources and use them or any method you want ...
REMEBER , just the Program which you load to memory will be hidden ...

[suffixx]

Very nice :) Next time, I'll also hide my programms in Taskmanager :)

You also have code to block regedit, cmd and tskmrg?

greetings

[Cecilia]

This is simple reflection loading.
It is used in most crypters.

Smaller code below
C#:

PHP Code


<?php 
Assembly.Load(bytes).EntryPoint.Invoke(null, new object[] { null }); 


[Only3]

so what the point of it if once u close the loader it will be closed too

[xeinebiu]

so what the point of it if once u close the loader it will be closed too

Mabye you can try to make changes to the code ...

[SadJc]

Thank you very useful! I appreciate it.

[comeback]

if I choose server.exe , then server.exe will run automatic dan hide in task manager ??

[xeinebiu]

if I choose server.exe , then server.exe will run automatic dan hide in task manager ??

yea it will be loaded in ram ... but user can close the loader from taskmanager ... this is not good ...

[Illusionisten]

IDK how this works but couldnt you just hide yourself instead of having exe 1 hiding your exe 2

[Hopsin]

Hello guys ...
In this thread I want to show you a method how to hide your process from TASKMANAGER ...

1. Open New Project
   


2. Import Libraries
   
   Code

   Imports System.Reflection
Imports System.Runtime.CompilerServices


3. Form_Load
   In Form_Load Event add this code :
   
   Code

   Dim s As New OpenFileDialog
s.ShowDialog()

Dim filesbytes() As Byte = IO.File.ReadAllBytes(s.FileName)
Dim x As New Threading.Thread(AddressOf RunFromMemory)
x.TrySetApartmentState(Threading.ApartmentState.STA)
x.Start(filesbytes)
me.close
   
   


4. Add this Sub
   
   Code

   Private Sub RunFromMemory(ByVal bytes As Byte()) 'not sure how it works :(
Dim assembly As Assembly = assembly.Load(bytes)
Dim entryPoint As MethodInfo = [assembly].EntryPoint
Dim objectValue As Object = RuntimeHelpers.GetObjectValue([assembly].CreateInstance(entryPoint.Name))
entryPoint.Invoke(RuntimeHelpers.GetObjectValue(objectValue), New Object() {New String() {"1"}})
End Sub
   
   

This Sub will be called and all bytes you chosed will be run in memory and will be invisible in PROCESS List in TASKMANAGER ...
You can import the bytes to Resources and use them or any method you want ...
REMEBER , just the Program which you load to memory will be hidden ...

I think i have seen this before. Nonetheless, many thanks OP for sharing. 👍

[Moon Rock]

I'm going to try this soon, thanks for sharing :Smile:

[Tom2565]

NO WORKING


System.BadImageFormatException

[radicalxfrosty]

Thanks OP for sharing this method!
nicee

[Tom2565]

NO WORK BLYAT There was an error posting your reply: The message is too short. Please enter a message longer than 25 characters.

[Vyxn]

NO WORK BLYAT There was an error posting your reply: The message is too short. Please enter a message longer than 25 characters.

You must be a programmer to make it work. :)