The Enigma Protector x64 v7.4 (HWID Lock)

Two simple Win x64 GUI applications protected using Enigma x64 v7.4.

Challenge is to;

1. bypass the hardware ID lock;
2. unpack the application.

Let us go together to solve this issue.

File Information

Submitter lovejoy226

Submitted 06/17/2024

Category UnPackMe

View File

If you provide the key, it will be even more perfect

 

Win64GUI-Enigma v.7.40 uses constant encryption and cannot be bypassed without a valid key

5 hours ago, lengyue said:

If you provide the key, it will be even more perfect

 

Win64GUI-Enigma v.7.40 uses constant encryption and cannot be bypassed without a valid key

@lengyue So you could not bypass the 2 protected ones?

Password : www.tuts4you.com

Regards.

sean.

59 minutes ago, The Binary Expert said:

@lengyue So you could not bypass the 2 protected ones?

Password : www.tuts4you.com

Regards.

sean.

uses constant encryption and cannot be bypassed without a valid key，I can't bypass it

41 minutes ago, lengyue said:

uses constant encryption and cannot be bypassed without a valid key，I can't bypass it

@lengyue Try this please.

Enigma x64 Protected and Keymaker.zip

Regards.

sean.

Edited July 20, 20241 yr by The Binary Expert

RVA:D05BE7   mov  rax,1

RVA:38A1E0   encryption constant

17 hours ago, gzfuqun111 said:

RVA:D05BE7   mov  rax,1

RVA:38A1E0   encryption constant

@gzfuqun111

Regards.

sean.

Edited July 22, 20241 yr by The Binary Expert

RVA:D05BE7   mov  rax,1

RVA:38A1E0   encryption constant 

Your need to modify the  above two  parts.

1 hour ago, fq3803 said:

RVA:D05BE7   mov  rax,1

RVA:38A1E0   encryption constant 

Your need to modify the  above two  parts.

Cousin, could you please provide a tutorial.

On 7/22/2024 at 9:29 PM, collins said:

Cousin, could you please provide a tutorial.

Jump to module baseaddress+RVA， Set hardware execution breakpoints ,run, set rax==1 run.OK！You will looking.

 

@The Binary Expert

Win64GUI_Enigma v.7.40

Win64GUI_Enigma v.7.40_encrypted

Without the correct registration code, I cannot crack it~!

Edited July 23, 20241 yr by lengyue

5 hours ago, lengyue said:

Jump to module baseaddress+RVA， Set hardware execution breakpoints ,run, set rax==1 run.OK！You will looking.

 

@The Binary Expert

Win64GUI_Enigma v.7.40

Win64GUI_Enigma v.7.40_encrypted

Without the correct registration code, I cannot crack it~!

May be need to brute force to get hash decryption without combination of valid data as name and key.

52 minutes ago, TRISTAN Pro said:

May be need to brute force to get hash decryption without combination of valid data as name and key.

@TRISTAN Pro  Download this package which is included of the keymaker.

52 minutes ago, TRISTAN Pro said:

HWID : C360B-83DD5-188BB-97BB6-115FD-C7C8F-2F465-E76A7

Name : tuts4you.com

Key : LN6Q-QRGH-4B2V-64DU-AHQC-GACW-PCL8-6MKK-DU8L-NRTK-Y8WN-3F4A-XK3D-7WW2-54JL-WCMQ-L5MZ-QXB5-9EKU-UAGJ-F6BZ-KFCG-HPFN-4F3K-H6EU-2GGN-PZ55-QX49-ULGX-YXX7-HMNF-TNR8-ZS7D-2UH9-W3L2-PWM9-44E2-5B4A-6TDN-HCYD-6VER-W7LS-JMGL-HK8V-AQCP-KUPZ-JMFD-QARC-5QY8Q

Regards.

sean.

Edited July 23, 20241 yr by The Binary Expert

On 7/24/2024 at 3:44 AM, The Binary Expert said:

@TRISTAN Pro  Download this package which is included of the keymaker.

Regards.

sean.

Take some time to create a KeyGen example.

@The Binary Expert

Try this please.

WinGUI x64_KeyGen_DEMO.rarWinGUI x64_KeyGen_DEMO.rar

Edited August 24, 20241 yr by lengyue

3 hours ago, lengyue said:

Take some time to create a KeyGen example.

Try this please.

https://workupload.com/file/cm9htLWkrbd

@lengyue

Regards.

sean.

On 7/21/2024 at 3:12 AM, Sean the hard worker said:

@lengyue Try this please.

Enigma x64 Protected and Keymaker.zip 4.35 MB · 116 downloads

Regards.

sean.

Hello, everyone.

How to reset this version of the enigma protector. the trial reset application does not make it reset.

Any suggestions are welcome.

Regards.

sean.

On 11/27/2024 at 10:45 PM, Sean Park - Lovejoy said:

Hello, everyone.

How to reset this version of the enigma protector. the trial reset application does not make it reset.

Any suggestions are welcome.

Regards.

sean.

Remember to search for a file name in the registry.

20 minutes ago, lengyue said:

Remember to search for a file name in the registry.

@lengyue The root path itself is the storage of the credentials.

컴퓨터\HKEY_CURRENT_USER\Software

Name and Key.

Regards.

sean.

On 7/23/2024 at 10:51 PM, lengyue said:

Jump to module baseaddress+RVA， Set hardware execution breakpoints ,run, set rax==1 run.OK！You will looking.

@lengyue No. it does not run.

My specification.

Edition    Windows 11 Home
Version    23H2
OS Build    22631.4460
Windows Feature Experience Pack 1000.22700.1047.0
 

Regards.

sean.

Edited December 3, 2024Dec 3 by Sean Park - Lovejoy

Hey again everyone.

Are there anyone who can bypass this one?

Form_protected_Constant.zip

Best Regards.

sean.

3 hours ago, Sean Park - Lovejoy said:

Hey again everyone.

Are there anyone who can bypass this one?

Form_protected_Constant.zip 3.2 MB · 2 downloads

Best Regards.

sean.

After using constants, if you don't provide the registration machine code and key, almost no one is willing to do it.

3 hours ago, lengyue said:

After using constants, if you don't provide the registration machine code and key, almost no one is willing to do it.

@lengyue Only by changing the hardware id, can we bypass the locking protection when it has used the constant? 

 

HWID : 1354B-0D7F2-A2541-5F2B9-483FF-FC95B-18632-6447D

NAME : sean

Key : AUAWW7DB742FPSGAWQ2UTKRHL7X7PJFSEBELHU3XUSAVCX2SBANW6PWYKU4M26A9VGUN83E432SKPTWQ79J92MHKCPSH

Do you have the modified x64dbg script for 64 bit enigma hwid locked targets? I mean the script that is included in the @CodeExplorer's enigmahardwareid changer.

How to bypass in case of 64 bit enigma constant encription hwid locked targets?

Regards.

sean.

Edited December 4, 2024Dec 4 by Sean Park - Lovejoy

10 hours ago, Sean Park - Lovejoy said:

@lengyue Only by changing the hardware id, can we bypass the locking protection when it has used the constant? 

 

HWID : 1354B-0D7F2-A2541-5F2B9-483FF-FC95B-18632-6447D

NAME : sean

Key : AUAWW7DB742FPSGAWQ2UTKRHL7X7PJFSEBELHU3XUSAVCX2SBANW6PWYKU4M26A9VGUN83E432SKPTWQ79J92MHKCPSH

Do you have the modified x64dbg script for 64 bit enigma hwid locked targets? I mean the script that is included in the @CodeExplorer's enigmahardwareid changer.

How to bypass in case of 64 bit enigma constant encription hwid locked targets?

Regards.

sean.

Please give me an attention, everyone.

Here is the x64 sample executable binary.

Form x64_protected_Constant.zip

HWID : 1D648-95F87-46426-A4EE2-F5FB1-48769-EAF7D-BC36F

NAME : sean

KEY : AUAXW9BTXYFTPSGAWQ7R9KRHL7X7D6E6JCQ5EKBYA5YMV8JC544ZC45BRRDFXB65FKJN2X7MPK5C2PPT99WE4AZK82SN

Regards.

sean.

Edited December 4, 2024Dec 4 by Sean Park - Lovejoy

On 12/5/2024 at 3:46 AM, New Year - New Mind said:

Please give me an attention, everyone.

Here is the x64 sample executable binary.

Form x64_protected_Constant.zip 4.44 MB · 11 downloads

HWID : 1D648-95F87-46426-A4EE2-F5FB1-48769-EAF7D-BC36F

NAME : sean

KEY : AUAXW9BTXYFTPSGAWQ7R9KRHL7X7D6E6JCQ5EKBYA5YMV8JC544ZC45BRRDFXB65FKJN2X7MPK5C2PPT99WE4AZK82SN

Regards.

sean.

Forgive me for speaking frankly. There is no need to use the so-called "KeyGen", and it can be directly forced to bypass this protection. Those who boast about "KeyGen" but do not provide effective solutions are useless besides wasting forum space and questioner's time.

 

 

12 minutes ago, boot said:

Forgive me for speaking frankly. There is no need to use the so-called "KeyGen", and it can be directly forced to bypass this protection. Those who boast about "KeyGen" but do not provide effective solutions are useless besides wasting forum space and questioner's time.

 

 

@boot How to bypass the constant using hwid lock?

Regards.

sean.

On 12/4/2024 at 11:16 PM, New Year - New Mind said:

Please give me an attention, everyone.

Here is the x64 sample executable binary.

Form x64_protected_Constant.zip 4.44 MB · 11 downloads

HWID : 1D648-95F87-46426-A4EE2-F5FB1-48769-EAF7D-BC36F

NAME : sean

KEY : AUAXW9BTXYFTPSGAWQ7R9KRHL7X7D6E6JCQ5EKBYA5YMV8JC544ZC45BRRDFXB65FKJN2X7MPK5C2PPT99WE4AZK82SN

Regards.

sean.