UnPackMe (.NET)

VirtualGuard v1.0 This file is protected by the first version of VirtualGuard. VirtualGuard is an obfuscator I develop that I am trying to receive some stress testing on I hope this VM makes people think at least a little bit; It's fairly close to 1:1, however I do believe I do some interesting things with comparisons and branching. Haven't seen it anywhere else. Let the record state this is not a "mod" of any other vm, so if you are interested in seeing some new stuff this is for you. This sample contains some fairly simple branch offset mutations, at first glance it may be a slight "wtf moment" (at least I hope), but as soon as you figure out how the compa…

DNGuard HVM v3.953 Try to unpack or alternatively provide the secret key, URL, Name and Address Protections used: DNGuard Enterprice HVM 3.953 Good luck. File Information Submitter Mohd Submitted 09/08/2020 Category UnPackMe (.NET) View File

VMProtect Lite v3.8.7.2001 This methods protected with Ultra setting (mutation+virtualization) and complexity none ( for example if complexity setted 22% the output goes 1mb ). Either unpack it, either provide a valid license file. File Information Submitter whoknows Submitted 08/27/2024 Category UnPackMe (.NET) View File

dotNet Protector v6.0.7180 Assemblies are obfuscated, then method bodies are replaced by corrupted code; de-compilation and disassembly tools like ILDASM can no more unassemble methods. Components Protection, this feature enables not only exe protection, but dll as well. ASP.Net is supported by dotNet Protector. Added anti-JIT. File Information Submitter VB56390 Submitted 08/24/2024 Category UnPackMe (.NET) View File

VMProtect v3.5.0.1213 Try to unpack or alternatively provide a serial. If there is no solution provided by Saturday 11am (GMT+0) I will attach the same without debugger detection. Protections used: Debugger detection (User-mode + Kernel-mode) Ultra (Mutation + Virtualization) File Information Submitter whoknows Submitted 08/06/2020 Category UnPackMe (.NET) View File

Simple Calculator (Enigma 7.40 + ILProtector 2.0.22.14) This is a simple calculator.exe. Protected with ILProtector 2.0.22.14 and double layer Enigma 7.40. First layer on DLL, second layer on EXE and added DLL in Enigma Virtualbox. For skilled reversers this will not be a problem unpack this. File Information Submitter azufo Submitted 01/10/2024 Category UnPackMe (.NET) View File

DNGuard HVM v3.9.6.2 This file is protected using DNGuard HVM 3.9.6.2 Protections used : HVM Jit Challenge is to unpack and post details of methods used. File Information Submitter 0x59 Submitted 01/03/2021 Category UnPackMe (.NET) View File

Protections: Winlicense Demo 2.2.7.0 (x64) Compiler: .NET If you succed to unpack please make a tutorial. WinlicenseUnpackMe.NET.rar

AgileNET v6.6.0.4.2 AgileNET (code virtualization on 1 method only, no other protector features used) File Information Submitter whoknows Submitted 11/11/2023 Category UnPackMe (.NET) View File

This is UnpackMe, protected with .NET Reactor 4.9 All Protection Option. Unpack and Remove Nag MessageBox, please. UnpackMe.rar

Language : C# Platforms : Windows Packer/obfuscator : 198 Protector V2 ( ConfuserEx Modded ) Description : Hi everyone, hope one of you friends can unpack the target and teach us how to unpack it. Virustotal : https://www.virustotal.com/gui/file/07638f4335a23fbb62e7c8e471398a8d556ca8ecbdea8395f4d55f76aebe3bce/detection Download : Unpackme.exe

Language : .NET Platform : Windows x32/x64 OS Version : All Packer / Protector : Anti Dump + IL Protection + Enigma Protector 3.50 Description : You need to unpack and change the Text. "Tuts4you Special Unpack Edition" Screenshot : UnpackMe by Lucifer.exe

NETBuilderInjection + VMP I took my NETBuilderInjection and turned it into a Protector, but I don't know how secure it is. (For me, it's safe enough.) So I made this little program, The objectives are: [Unpackme] You should unpack it and get the cleanest code possible. [Crackme] In the textbox where the HWID is displayed you must modify the text and write something else in it. [Bypass] You will need to disable "Falcon Anticheat" from the executable. ---------------------------------------------------------------------------- Difficulty : Unknown Language Base : .NET Platform : Windows - .NET Framework 4.6 OS Version : Windows 7 or higher.…

Difficulty : medium Language : c# Platform : Windows x32/x64 OS Version : All Packer / Protector : BEDS 4,5 Description : unpack and tell how fast did you unack it and the way if possible Screenshot : ConsoleApp1.rar

Themida v2.4.6.30 This is a .NET executable with a Goland DLL packed with Themida. Try to unpack the executable, dump the bundled DLL then fix the DLL to make it work. Once completed detail the methods used and how you fixed the DLL. File Information Submitter despy3 Submitted 12/17/2020 Category UnPackMe (.NET) View File

Eazfuscator v2021.1 Unpack and/ or provide a valid serial. Archive password : superfrog File Information Submitter whoknows Submitted 07/14/2021 Category UnPackMe (.NET) View File

Difficulty : 3,5 Language : C# Platform : Windows OS Version : All Packer / Protector : ConfuserEX 1.0 Modified Description : I am testing an anti de4dot and others ... If possible I would like to know the process you have done. Screenshot : Holly shit.exe

Language : .NET Platform : Windows [x32/x64] OS Version : Windows 10 Packer / Protector : ConfuserEX Custom [Dark Protector Mod] Description : Unpack the exe to find the key! If you would give a brief explanation on how you unpacked it. The exe has max protections and will pop up a messagebox once you enter the correct password. Protections Added to this Unpack Exe: Junk Code, Anti De4Dot, Anti Debug, Anti Dump, Anti ILDasm, Anti Tamper, Calli Protection, Constant Dis, Constants, Control Flow, Hide Methods, Invalid Metadata, MD5 Checksum, Mid Ref Proxy, Mutate Constants, Mutations, Module Flood, Reference Proxy, Renamer, Resources, and Stack Underflow…

VMProtect v3.6 Hi all, This is a protected with the RETAIL edition... Mutation / Virtualization w/ the built in VMProtect license system. There are 2 enter serial dialogs, once you solve the 1st, drives you to 2nd, when a valid serial entered exporting a file... If a valid serial entered on 1st form, is saved to license.diz file. File Information Submitter whoknows Submitted 06/24/2022 Category UnPackMe (.NET) View File

VMProtect v3.4.0.1155 Try to unpack or alternatively provide a serial. If there is no solution provided by Saturday 11am (GMT+0) I will attach the same without debugger detection. Protections used: Debugger detection (User-mode + Kernel-mode) Ultra (Mutation + Virtualization) Disabled protections: Virtual Machine Packer File Information Submitter whoknows Submitted 05/19/2020 Category UnPackMe (.NET) View File

Only obfuscated with ConfuserEX. The objective is to unpack and crack the file. CrackMe - ConfuserEX.rar

NETProtect.IO v2.0.0 This unpackme was protected using NETProtect.IO using protection options shown in the screenshot. Nice to meet guys in forum. File Information Submitter learningit25 Submitted 04/30/2021 Category UnPackMe (.NET) View File

Difficulty : 5 Language : .NET C# Platform : Windows .x32/x64 OS Version : All Windows Packer / Protector : DotNetPatcher 4.5.9 (last Version) Description : max Protaction. note Method and tutorial how to unpack it. The file should be runnable after unpacking it Screenshot : unpackme.zip

Difficulty : 4.5 Language : .NET Platform : Windows IA-32, IA x86-x64 OS Version : All Windows (Must have at least .NET Framework 4.5+ to run!) Packer / Protector : NOPFuscator v2.0 Description : Nothing much from my end, just sitting here and waiting til someone can break into this new entry :"D - Just Unpack, if you feel adventurous enough to Crack it, Go ahead Hope Ya'll have fun with it since I posted this in the UnPackme's Area, an entry will be taken as solution when the program is completely deobfuscated, as the cracking part is only optional. Screenshot : crackmetonki.exe

NiggaEX Unpack and provide a overview of how you did it and what tools were used. File Information Submitter DarkShadow Submitted 02/13/2022 Category UnPackMe (.NET) View File