devsoft's Mr Good Life Crackme

Author:
devsoft

Language:
.NET

Upload:
2023-05-31 10:36

Download

Platform:
Windows

Difficulty:
4.0

Quality:
2.5

Arch:
x86

Downloads:
8

Size:
10.00 KB

Writeups:
0

Comments:
11

Description

The software is highly encapsulated. Reversion will be the guide to uncover the hidden message. Hint's can be provided when asked.

Comments (11)
Writeups (0)

You must be logged in to post a comment

devsoft on 2023-06-01 14:28: [Click to reveal]

catears on 2023-06-04 11:46: [Click to reveal]

devsoft on 2023-06-04 13:12: Nop not weird at all, friend. The new exe that it's getting flag is compressed to the max, still is too big to be hosted here. The second exe you see, it's protected and the injector of .NET is getting flagged. It's gets without saying that you should open an exception. Extract the .NET managed code and once you extract the data you'll realize how to solve it.

thebovl on 2023-06-05 13:18: 404

devsoft on 2023-06-05 13:33: I hate to do this, but since it's the only way = aHR0cHM6Ly90aW55dXJsLmNvbS9NUkdPT0RMSUZF Again, the data is just too much to compress, and all of that data is needed.

devsoft on 2023-06-05 15:37: I've been investigating the 404 issue. It seems dropbox marked my file as insecure. The new one has a VirtualFileSystem Layer to evade common systems. If anyone else has a problem running this one until it asks for a key, just mention.

devsoft on 2023-06-06 16:44: @NANOBOT, that mail is gone, i'l leave discord Discord = leonardo0011

DZghost on 2023-06-10 06:11: [Click to reveal]

devsoft on 2023-06-10 09:19: @DZghost, well I guess you are not familiarized with packers right? No pall, the packer is protecting a Bitmap library and a PNG with 6mb. And now no one needs more info to resolve this... The Packers are DOTNETREACTOR and Turbo Studio... Resolve this inside a VM in case you are afraid. Any doubt you can ask, but beware your accusations.

bang1338 on 2024-08-22 13:47: file is gone, rip.

jeffli6789 on 2026-01-04 06:25: This crackme had been reviewed when it was originally approved and is likely safe. Crackmes often get flagged by antivirus software, EDR systems, or VirusTotal because they may use the same protection techniques found in malware (packers, anti-debugging, self-modifying code, etc.), or simply a false positive. This does NOT mean the crackme is actually malicious. The only way to confirm whether something is truly malware is to reverse engineer it and find proof of malicious code and/or malicious behavior. If you still believe this is actual malware, please report it to us via email: crackmesone@gmail.com. **We encourage everyone to run crackmes in a VM (virtual machine) and exercise caution when executing unknown binaries.** *Disclaimer: We do our best to review submissions, but mistakes can happen. The administrators and crackmes.one cannot be held liable for any damages or losses resulting from the use of files downloaded from this site. Always exercise caution and use a sandboxed environment.*

Show all spoilers

You must be logged in to submit a writeup