.NET Reactor v7.3 (Embedded DLL's)

File protected by .NET Reactor v7.3 having Code Virtualization enabled. By nature the application using Dependency Injection (this time heavily developed), the 3rd party files embedded to main exe (see shot2), in addition System.Data.SQLite.dll lying near application. Find registration combination and reply it with the success message!

• Custom antidebugger

File Information

Submitter whoknows

Submitted 06/26/2025

Category UnPackMe (.NET)

View File

unpacked.exe

congrats @CreateAndInject

here is the source incl refs @

--limited time download, expired-- 

 

Edited July 4Jul 4 by whoknows

What? No explanation of what he done?
 

1 hour ago, CodeExplorer said:

What? No explanation of what he done?
 

yes crt 

On 7/2/2025 at 10:26 PM, whoknows said:

congrats @CreateAndInject

here is the source incl refs @ 

WindowsFormsApplication37-src.rar 1.12 MB · 6 downloads

Which compiler do you use? Can you send it again but with the original compiler output file?

Release.rar

VS2012 Community Edition

7 hours ago, whoknows said:

Release.rar 191.01 kB · 6 downloads

VS2012 Community Edition

VS2012? Typo for VS2022?

V-S-2-0-1-2

Some other protection can be done with Slayer, I just did a bit update task for my devirt tool so everything is file there

WindowsFormsApplication37_Slayed.NoNetReactorVM.exe.zip

On 7/3/2025 at 9:51 AM, CodeExplorer said:

What? No explanation of what he done?
 

I agree.

He never explains step by step how he did it.

Why is it approved?

@CodeExplorer https://gofile.io/d/5hzUgS

Hello, do you have a solution for this? Because I've tried your other Slayer fix versions, the code isn't fully decoded, and unfortunately, the executable doesn't work.

59 minutes ago, decode said:

@CodeExplorer https://gofile.io/d/5hzUgS

Hello, do you have a solution for this? Because I've tried your other Slayer fix versions, the code isn't fully decoded, and unfortunately, the executable doesn't work.

@CreateAndInject Do you have a chance to deal with this?

.NET Reactor + Babel.NET

1 hour ago, CreateAndInject said:

.NET Reactor + Babel.NET

I'm sorry, I tried everything I had for Babel and Reactor but it was unsuccessful.

4 hours ago, decode said:

I'm sorry, I tried everything I had for Babel and Reactor but it was unsuccessful.

Protected by Unregistered version of Reactor.
It has file integrity check.
First unpack by SMD_FOR_AGILE
https://forum.tuts4you.com/topic/41297-smd-for-agile/page/16/#comment-228021

Then use this new sheet: for reactor:
https://workupload.com/file/42W8w5WAUMj
specify file to decrypt as SysEventServiceV298_msil.exe
and as original file SysEventServiceV298.exe
the unpacking works fine.
Note however that file still doesn't run as Babel obfuscation is still there.

4 hours ago, decode said:

I'm sorry, I tried everything I had for Babel and Reactor but it was unsuccessful.

You can post in the thread of target protector(eg. https://forum.tuts4you.com/topic/43240-netreactorslayer/ for your target)
Rename it to 1.exe or test.exe to let people believe it's just a sample or demo rather than commercial software, and claim the unpacker doesn't work.
Maybe they will update the unpacker to support your target.

Edited 23 hours ago23 hr by CreateAndInject

15 minutes ago, CodeExplorer said:

Protected by Unregistered version of Reactor.
It has file integrity check.
First unpack by SMD_FOR_AGILE
https://forum.tuts4you.com/topic/41297-smd-for-agile/page/16/#comment-228021

Then use this new sheet: for reactor:
https://workupload.com/file/42W8w5WAUMj
specify file to decrypt as SysEventServiceV298_msil.exe
and as original file SysEventServiceV298.exe
the unpacking works fine.
Note however that file still doesn't run as Babel obfuscation is still there.

Thank you for your interest. I need the working file, so I think I need to report this to Slayer. It seems like there's no other way to fix it.

13 minutes ago, CreateAndInject said:

You can post in the thread of target protector(eg. https://forum.tuts4you.com/topic/43240-netreactorslayer/ for your target)
Rename it to 1.exe or test.exe to let people believe it's just a sample or demo rather than commercial software, and claim the unpacker doesn't work.
Maybe they will update the unpacker to support your target.

I'll report this to Slayer, but I don't think they're actively updating it.

Here we go, after the above step with slayer - Decrypt Methods unckecked;
// Token: 0x0600081D RID: 2077 RVA: 0x0006E2E8 File Offset: 0x0006C4E8 [MethodImpl(MethodImplOptions.NoInlining)]
internal unsafe static void qp1d5IbOJ()
{

Just fill at 006C4E8 with 062A so will change the body of method qp1d5IbOJ to a simple ret.
after that we have a working file and we can deobfuscate with BabelDeobfuscator.
Here is working unpacked file:
https://workupload.com/file/3JqMck9ZtYR

@CodeExplorer
please check Private message.

1 hour ago, CodeExplorer said:

Here we go, after the above step with slayer - Decrypt Methods unckecked;
// Token: 0x0600081D RID: 2077 RVA: 0x0006E2E8 File Offset: 0x0006C4E8 [MethodImpl(MethodImplOptions.NoInlining)]
internal unsafe static void qp1d5IbOJ()
{

Just fill at 006C4E8 with 062A so will change the body of method qp1d5IbOJ to a simple ret.
after that we have a working file and we can deobfuscate with BabelDeobfuscator.
Here is working unpacked file:
https://workupload.com/file/3JqMck9ZtYR

A huge thank you, I appreciate your many years of service, master. However, the link is broken; is there any chance you could re-upload it? I couldn't download it.

2 minutes ago, decode said:

A huge thank you, I appreciate your many years of service, master. However, the link is broken; is there any chance you could re-upload it? I couldn't download it.

https://limewire.com/d/ms51G#Mpzupr348q

https://fileroy.com/M2BGwO2XGj40/file

https://zippyshare.day/EbxBhxDZZZbrlIH/file