What would cause ** Failed to open process? about vmpdump HOT 11 OPEN

Don't work with powershell, try with 'cmd'.

from vmpdump.

Don't work with powershell, try with 'cmd'.

It's the same (as admin)

D:\Sandbox>tasklist | findstr PCManager
PCManager.exe                 9832 Console                    1     86,220 K

D:\Sandbox>VMPDump.exe 9832 version.dll
** Failed to open process 0x2668

from vmpdump.

To open any process with all_access, you need SeDebuPrivileges set in your process token, i dont think you did that!

can u fix it please? and provide release build

from vmpdump.

To open any process with all_access, you need SeDebuPrivileges set in your process token, i dont think you did that!

can u fix it please? and provide release build

PS C:\WINDOWS\system32> whoami /priv | findstr "SeDebug"
SeDebugPrivilege                          Debug programs                                                     Enabled
PS C:\WINDOWS\system32> tasklist | findstr PCManager
PCManager.exe                25436 Console                    1     87,232 K
PS C:\WINDOWS\system32> D:\Sandbox\VMPDump.exe 25436 version.dll
** Failed to open process 0x635c

Did I do it right?

from vmpdump.

it may be protected by a kernel driver or protected process light.

from vmpdump.

i dont know if SeDebugPrivileges are inherited by the child process.

from vmpdump.

I can Confirm even after Adding SeDebugPrivilege to the process(i edited the code and compiled), OpenProcess Fails it can be a protection feature of certain vmprotect versions?

from vmpdump.

EDIT: Ok, It works only, if VMPDump.exe is located in C:
I have same issue.

from vmpdump.

I had the same issue, and it turns out that the module name is case-sensitive. Changing it to the exact literal helped.

from vmpdump.

There are some problems with the latest V1.2, just use V1.1.

from vmpdump.

i get the same errror when my pid is 8800

VMPDump 2260 "" ep-0x1fb20 -disable-reloc
** Failed to open process 0x8d4

from vmpdump.