Moving To Discord: https://discord.gg/UmXNvjq

Hello everyone, due to bugs with the forum software that I do not have time to care about, I am going to be shutting down these forums and moving my discussions to Discord instead. I will eventually keep releases here on the site but the forums will be removed sooner or later. I encourage people to join my personal Discord if you have questions, if you are looking for any of my projects, etc.




Registration Code (Part 1): w%kQ6
Registration Code (Part 2): b<#$1[*(cw~
In order to register on this forum, you must use the codes above. Combine them into one code (copy paste).

hi atom0s i followed you here from other website need your help

Feel free to discuss anything here, as long as it follows the rules!
Locked
username33
Posts: 3
Joined: Sun Dec 08, 2019 3:06 am

hi atom0s i followed you here from other website need your help

Post by username33 » Sun Dec 08, 2019 3:09 am

this was the reply i left.

thank you so much for the reply and it is amazing you got it opened.
i tried the same but it is not working please kindly share the method you used to unpack this or how you came about doing what you did.
am using windows 7 do i need to use it on virtual machine using windows xp?

Image

exe
https://gofile.io/?c=280URM
can you share your
1: plugin settings
2: unpacked exe
3: tools i need to get started.

am using winxp in vm just need little help from a pro thanks.
User avatar
atom0s
Site Admin
Posts: 449
Joined: Sun Jan 04, 2015 11:23 pm
Location: 127.0.0.1
Contact:

Re: hi atom0s i followed you here from other website need your help

Post by atom0s » Mon Dec 09, 2019 7:26 am

Given that the program is .NET, Themida doesn't really protect it except for in its non-running state. You can use a tool like MegaDumper to dump .NET programs running on the system to get the unprotected file in the case of Themida. Just run the file, run MegaDumper, dump the given process you want to get the exe/dll from and it'll create a dumped output of everything it can detect as .NET and valid modules.

In this case, there isn't any extra protection so once you do that, you have the unprotected exe back.
Derp~
Need a great web host? Check out: AnHonestHost.com


Donations can be made via Paypal:
https://www.paypal.me/atom0s
username33
Posts: 3
Joined: Sun Dec 08, 2019 3:06 am

Re: hi atom0s i followed you here from other website need your help

Post by username33 » Mon Dec 09, 2019 5:39 pm

this exe is vmprotect
https://gofile.io/?c=kzAiMC

am on win7 trying to unpack but i get message but when i try and run it after passing exception bit.
Image

can you provide a unpacked of this.
please kindly teach me the settings i need to unpack this.
Locked

Who is online

Users browsing this forum: No registered users and 1 guest