Difficulty : 8/10
Language : .NET C#
Platform : Windows x64
OS Version : All
Packer / Protector : DNGuard + Themida

Description :

Get the password.

Screenshot :

Crackme.zip

Edited May 7, 20178 yr by 0x32

Difficulty: 8/100
Password:

BlueGodMonkeys!*

 

Run the target. In my case, for bypassing the VM detection I had to change this registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverDesc
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion

Use ProcessHacker to search for all strings(default settings):

On 5/11/2017 at 11:21 AM, Gyrus said:

Difficulty: 8/100
Password:

BlueGodMonkeys!*

 

Run the target. In my case, for bypassing the VM detection I had to change this registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverDesc
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion

Use ProcessHacker to search for all strings(default settings):

Great job! I just posted V2.0, can you try crack it again?

On 2017-5-11 at 11:21 PM, Gyrus said:

Difficulty: 8/100
Password:

BlueGodMonkeys!*

 

Run the target. In my case, for bypassing the VM detection I had to change this registry entries:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverDesc
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\SystemBiosVersion
HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\VideoBiosVersion

Use ProcessHacker to search for all strings(default settings):

 

how to use ProcessHacker to search ?

@collins

@0x32

I'll check it.