Jump to content
Tuts 4 You

Recommended Posts

Posted

Difficulty : 6.0
Language : .NET
Platform : Windows x32/x64
OS Version : All
Packer / Protector : ConfuserEX Custom

Description :

Unpack, and give a quick tut on how you did it :)

ConfuserEx_UnpackMe.exe

unpack custom.JPG

Posted (edited)

MegaDumper  for dump

and use de4dot and dnspy ☺️

Edited by er132
Posted (edited)

Corrupted file, not even starting

Edit:

it works now, bad download

 

Edited by Ahmad_k
Posted
On 8/21/2018 at 8:28 AM, er132 said:

MegaDumper  for dump

and use de4dot and dnspy ☺️

whats he login info then ;)

Posted

i have never seen this VM before (KoiVM) The dev is no longer accepting new customer and there is no demo or trial to play with.

well you can unpack the confuseEx easly but KoiVm.Runtime.dll is doing all the rest

Posted
13 hours ago, Ahmad_k said:

i have never seen this VM before (KoiVM) The dev is no longer accepting new customer and there is no demo or trial to play with.

well you can unpack the confuseEx easly but KoiVm.Runtime.dll is doing all the rest

sorry forgot to add that you should give the login info in the description :)

  • 2 months later...
Posted
On ‎8‎/‎24‎/‎2018 at 12:53 AM, Ahmad_k said:

i have never seen this VM before (KoiVM) The dev is no longer accepting new customer and there is no demo or trial to play with.

well you can unpack the confuseEx easly but KoiVm.Runtime.dll is doing all the rest

I get Koi but cant go far. I went into koi.koi but when place a bp and save module still getting same thing.. can you help me?

Posted
Username: 0F3FC3280CACE186454E9040D1D07911
Password: E9A11EC3068B4BA61AB161FA3AD5C00B

And I used her😎

Posted
On 10/29/2018 at 5:07 AM, #Sith said:

Username: 0F3FC3280CACE186454E9040D1D07911
Password: E9A11EC3068B4BA61AB161FA3AD5C00B

And I used her😎

How did you solve it?. Can you post the way.

  • 7 months later...
lethalseconds
Posted

did anyone solve this yet? 

  • 3 months later...
Posted
Spoiler

Username : 0F3FC3280CACE186454E9040D1D07911

Password : E9A11EC3068B4BA61AB161FA3AD5C00B

I just looked in the memory using process hacker 2.

  • 2 weeks later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...