Protection : ConfuserEx + Mpress + Hex Editor

** program can't start **

** you must edit hex for make program can running **

 

Good Luck   

 

i don't know why virustotal show has trojan ,

it not has trojan

 

** Sorry , i'm not good English Language **

 

Virus Total ::
https://www.virustotal.com/en/file/8b8062899560e7a81c64d74030096b01d039b40efa258fcd8b5270ee9d0b7ede/analysis/1422087515/

 

Protection.rar

Edited January 24, 201510 yr by NightBaron

something error message is happened when i use unconfuserex tool .

something error message is happened when i use unconfuserex tool .

because i unconfuserex+de4dot before already

and i use confuserex after unconfuserex+de4dot

** Sorry , i'm not good English Language **

Edited January 24, 201510 yr by NightBaron

something error message is happened when i use unconfuserex tool .

you don't need to use unconfuserex to unpack this challenge (you need to use unconfuserex only if the confuserEx packer is used) 

use de4dot to unpack MPress then ConfuserEX Unpacker 0.12( and done! ).

 

 

 

Process.GetProcessesByName("MegaDumper").Length | Process.GetProcessesByName("NETUnpack").Length | Process.GetProcessesByName("SimpleAssemblyExplorer").Length | Process.GetProcessesByName("DotnetDumper").Length | Process.GetProcessesByName("ProcessHacker").Length | Process.GetProcessesByName("procexp").Length .....

seriously, this is pretty useless

Process.GetProcessesByName("MegaDumper").Length | Process.GetProcessesByName("NETUnpack").Length | Process.GetProcessesByName("SimpleAssemblyExplorer").Length | Process.GetProcessesByName("DotnetDumper").Length | Process.GetProcessesByName("ProcessHacker").Length | Process.GetProcessesByName("procexp").Length .....

seriously, this is pretty useless

 

lol Nice

 

EASY