Difficulty : 10
Language : .NET
Platform : Windows x32 / x64
OS Version : All
Packer / Protector : DNGuard

Description :

The encryption is from DNGuard 3.73 Enterprise included with HVM - JIT.

Screenshot :

 

DNGuard HVM CrackMe V1.rar

It doesn't matter how good the protection is, if it's applied incorrectly.

Password is:

Spoiler

r1z75iYR5I

 

kao , good job.   can tell me how to do ？

5 hours ago, kao said:

It doesn't matter how good the protection is, if it's applied incorrectly.

Password is:

  Hide contents

r1z75iYR5I

 

Correct What was your way to get this?

 

I learned and checked more the Documentation, and now i fixxed it Later i will post a new Crackme

[/img]

Edited March 1, 20178 yr by Onion_

8 hours ago, kao said:

It doesn't matter how good the protection is, if it's applied incorrectly.

Password is:

  Hide contents

r1z75iYR5I

 

I would like to learn more about dnguard manual unpack. Where should i start? thanks

@Legend-Modz-V1: I didn't have to unpack it to find the key..

Manual unpack - I would start by analyzing hmvruntm.dll but its a lot of work..

debug with OD can see the password

anyone have a tutorial for unpack this? plz!!!!! i would to like unpack anything!

Edited May 22, 20178 yr by kelalung

On 5/22/2017 at 10:02 PM, kelalung said:

anyone have a tutorial for unpack this? plz!!!!! i would to like unpack anything!

Unpacking is difficult, and different for every program
Doubt anyone actually unpacked this

But the method used to bypass the protection is above
You can use and debugger , the string is in plaintext

You can also use resource hacker and do a string search while it's running in memory

On 3/2/2017 at 10:43 AM, kao said:

I would start by analyzing hmvruntm.dll but its a lot of work..

What news about dnGuard unpacking? Are you have unpacked runtime?

@Elena: No, I never said I'm going to do that. I have absolutely no interest in DNGuard, as it is used only on crap Chinese software.

9 hours ago, kao said:

@Elena: No, I never said I'm going to do that. I have absolutely no interest in DNGuard, as it is used only on crap Chinese software.

What would you suggest for a good obfusactor then?