November 4, 2024Nov 4 Also, another question, the binary has at least 3 packer signatures, BoxedApp, ConfuserEx and DNGuard HVM. When I dump while at ExecuteMainMethod, i get this .NET Executable that seems I am not able to fix. Even setting AddressOfEntryPoint to _CorExeMain +0x1E, Universal Fixer fails telling me that it Metadata.RVA (BSJB) is invalid and aborts the fix. dnSpy can open the binary and show me the structure and I see calls to DNGuard inside so maybe ConfuserEx is the third stage. How to handle this?
September 22Sep 22 I added 64 bit support and generic extraction HydraDragonAntivirus/MegaDumper: Fixed 2025 version of Mega Dumper
Create an account or sign in to comment