Exetools

Exetools (https://forum.exetools.com/index.php)
-   Community Tools (https://forum.exetools.com/forumdisplay.php?f=47)
-   -   de4dot - Deobfuscator for .NET (https://forum.exetools.com/showthread.php?t=13951)

cachito 09-02-2015 21:56

Upload exe and I will try for you :)

Black_Legion 09-30-2015 19:11

1 Attachment(s)
i have an exe which de4dot detects it as Unknown Obfuscator. class names, method names and member names are all like guids, and it uses "Call Hiding" obfuscating method.
anybody knows what obfuscator it may be?

giv 10-01-2015 01:07

You can reserach witch obfuscator might be and add support to de4dot by yourself.
Just take a look here:
Quote:

http://mrexodia.cf/coding/2015/07/17/Extending-de4dot/

Black_Legion 10-01-2015 14:33

as i researched into the obfuscators it seems that it has been obfuscated with something like "disguiser.net". is there any solution available for this one?

RDGMax 10-02-2015 05:58

......................................

Black_Legion 10-11-2015 22:05

i found it with the help of kao
it was AppFuscator :-)

giv 10-12-2015 00:27

There are some tools for unpacking and string decrypting for this protector.

Mahmoudnia 12-21-2015 01:08

Hi giv
i can not unpack this file with de4dot !
Quote:

http://www.p30office.com/index.php?sdmon=downloads/app-xoffice/SetupP30Office3-6-2-40630.zip
Quote:

POX.Shell.exe
may you help me ?
thanks

msi_g 10-07-2016 01:24

A newbie question indeed.. i used de4dot.exe to deobfuscate the attached folder usig -d flag it deobfuscated all obfuscated exes (crypto obfuscator) but the problem is no the program does not run rather hangs..

https://mega.nz/#!00QmSZYK!56oBkSL9-7pc9KsMKEr7lW4cftLLluTyKyL-erLqvpQ

sendersu 10-07-2016 01:44

>but the problem is no the program does not run rather hangs..

deobfuscating != correct run :)

you need to charge your mind and go to rabbit hole

Sound 10-07-2016 03:11

de4dot-Support.Reactor5.0-wuhensoft

http://crack.vc/RceTools/NET/de4dot-Support.Reactor5.0-wuhensoft.7z

msi_g 10-07-2016 05:07

Hi all thanks for all! I unpacked it but the problem is my patching is nasty so license window appears frequently though it is not a big problem since you can put anything of proper length and get licensed!!

Is there a better solution?

https://mega.nz/#!E0gTCKCb!hFeYMsc40_9ftsh0O-5GU19WosWFTCn333RoGA2JYBc

nocturo 01-16-2017 22:55

I'm trying to use this, but it says unknown obfuscator and while it worked partially, most important stuff are still obfuscated and can't be browsed. Can anyone help? Here's the link to exe

https://mega.nz/#!awFjCIZL!FobLU14jimDuOKAv8MdEjzyU0Jg0haLiIQztSOv1ps0

simx 01-21-2017 18:45

You can force De4dot to select which de-obfuscation technique is to be used.

ivanov 01-27-2017 04:25

Quote:

Originally Posted by Sound (Post 107358)
de4dot-Support.Reactor5.0-wuhensoft

http://crack.vc/RceTools/NET/de4dot-Support.Reactor5.0-wuhensoft.7z

interesting, works perfect except still found something like "b0494a1f-4bd3-bFLN5Q3B5OEj76UB/UqymA==" in the Resources line.


All times are GMT +8. The time now is 01:02.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX