November 4, 2024Nov 4 Also, another question, the binary has at least 3 packer signatures, BoxedApp, ConfuserEx and DNGuard HVM. When I dump while at ExecuteMainMethod, i get this .NET Executable that seems I am not able to fix. Even setting AddressOfEntryPoint to _CorExeMain +0x1E, Universal Fixer fails telling me that it Metadata.RVA (BSJB) is invalid and aborts the fix. dnSpy can open the binary and show me the structure and I see calls to DNGuard inside so maybe ConfuserEx is the third stage. How to handle this?
Create an account or sign in to comment