Dotnet Dumper x64bit
 

Hello Telents

i would like to know can anyone have a tool like CodeCracker's Megadumper which can dump the dotnet files from the ram ? like megadumper is working under 32bit environment only but for 64bit there is no alternative.

Regards

I think code was released for most of his dotnet tools, maybe mod it to work with x64.. Something for you to study :)

X64NetDumper
 

X64NetDumper:
- Restore file name!

How to use guide:
Select target process, select a target directory (where all dumped files will be placed)! Enjoy!

Thank you so much CodeCracker

its really working well , in 64bit with dongle target can also get dumped if dongle attached :)

BR

Thank you CodeCracker
Is it possible that someone share it on other download site?

For Win64 .Net programe,it happen some wrong.Dump the exe of WL encrypted ,it appears "it is not valid pe" when it run in Win64.

https://www.sendspace.com/file/2aipq4

Thank you very much CodeCracker.
BTW, it seems that you have forgotten confuse or encrypt the program.

@NoYes

he release his codes on sourceforce as open source so there is no need to hide anything :)

CodeCracker: May be you also can share the source code here :) ?

@obfuscator
Sorry, but I still can't find it. Can you provide the link to me?

@NoYes
you can find its code using reflector as dumper is not protected ;)

@obfuscator
If using reflector, there still need to fix some errors.
And I found the source code,
include:AssemblyLoad Confuser_Methods_Decryptor ConfuserDelegateKiller ConfuserStringDecryptor ExceptionLogger MegaDumper Reactor_Decryptor Resource_Decryptor Simple_MSIL_Decryptor StaticDecompressor Universal_Fixer. All of these have source code.

Ugh....Okay? At least post the URL you found it, otherwise your post does nothing for others!!

Here guys:

Thanks to CodeCracker, released May 2013 on Tuts4You

AssemblyLoad.7z
https://www.dropbox.com/s/fwbdqbn1en062kt/AssemblyLoad.7z?dl=0

Confuser_Methods_Decryptor.7z
https://www.dropbox.com/s/wqb1h41cemcr95l/Confuser_Methods_Decryptor.7z?dl=0

ConfuserDelegateKiller.7z:
https://www.dropbox.com/s/9enw4cinvx81umd/ConfuserDelegateKiller.7z?dl=0

ConfuserStringDecryptor.7z:
https://www.dropbox.com/s/sjg4k1e5azrsjse/ConfuserStringDecryptor.7z?dl=0

ExceptionLogger.7z:
https://www.dropbox.com/s/i52g33j5df7n2fh/ExceptionLogger.7z?dl=0

MegaDumper.zip:
https://www.dropbox.com/s/i52g33j5df7n2fh/ExceptionLogger.7z?dl=0

ReactorDecryptor.7z:
https://www.dropbox.com/s/5zazh2fcd0uggkt/Reactor_Decryptor.7z?dl=0

ResourceDecryptor.7z:
https://www.dropbox.com/s/bgxmregkf8iqbyj/Resource_Decryptor.7z?dl=0

SimpleMSILDecryptor.7z:
https://www.dropbox.com/s/z6p7jmvknnl6pan/Simple_MSIL_Decryptor.7z?dl=0

StaticDecompressor.7z:
https://www.dropbox.com/s/ra2jw12rlqirakn/StaticDecompressor.7z?dl=0

UniversalFixer.7z:
https://www.dropbox.com/s/vkv57jxc1i8bt37/Universal_Fixer.7z?dl=0

Source only.