[ Crackme ] Unknown .NET Protection [ VM ]

Hi,
First of all i have to say " this is not my project and some friend ask me to upload challenge here "

Compiler : .NET

Protection :
[+] Binary Obfuscation

[+] Code Virtualization

[+] Anti-Debugging / Anti-Tampering

[+] Maybe some other protection

Rule :

Patch file to accept any password or find real password ( both accepted )
i will appreciate if you write something about you have done

Hint :
Run & Analyze file inside VM or isolated environment becuase of file isn't mine so i'm not responsible for anything


Regards

File Information

Submitter Gladiator

Submitted 09/16/2025

Category CrackMe

View File

When I run the file is just erase itself. Is this normal?

1 hour ago, CodeExplorer said:

When I run the file is just erase itself. Is this normal?

Same issue I think its Anti debug If something is detected then the exe is removed.

this is just another pasted and pasted. Double anti tamper from cfex, a simple jit which we can invoke the dictionary and get the jitted method data, restore. Double or triple proxy call. Reference Proxy. Most of it from Inx, iirc the jit was made by gabriel and pasted to other obf especially inx

6 hours ago, Mr-Toms said:

this is just another pasted and pasted. Double anti tamper from cfex, a simple jit which we can invoke the dictionary and get the jitted method data, restore. Double or triple proxy call. Reference Proxy. Most of it from Inx, iirc the jit was made by gabriel and pasted to other obf especially inx

Yes your write Another call is here

yes it has old anti-tamper protection ( self-erase )

.NET is kinda cool. Anyways AOB scan 0F 84 71 01 00 00 81 C6 then just flip JE -> JNE.

051B9F43 - 0F84 71010000 - je 051BA0BA in my case its on this address.