Static Devirtualization of Tencent VM by aftermathlabs
@OrcaCyberWeapons
Post #3872
259
Orca Cyber Weapons Some bugs found via binary instrumentation and fuzzing by aftermathlabs ~"Using BLARE2 for binary instrumentation to guide fuzzing via coverage. Seems to work well, two discord/chromium crasher media files in 30min~ We can instrument arbitrary PE files…aftermathlabs.net Static Devirtualization of Tencent VM Over the course of several months we have noticed an increased interest in Tencent VM obfuscation. We have had complete static devirtualization of this VM obfuscation for quite some time now and have noticed others have achieved similar deobfuscation results.