Themida Unpacker for .NET is a tool developed to quickly and easily unpack packed .NET files.
Support all version! (Tested in 1.x, 2.x, 3.x)
- bypass .NET based antidump (ConfuserEx etc...)
goto SuspendProcess/bin/Release/ folder
Just drag .NET file and select pd.exe! (32bit to 32bit, 64bit to 64bit)
pd.exe will dump file! if not, just manual dump with SCYLLA!!!!!
you have to install vbruntime and .NET runtime etc.... JUST INSTALL VISUAL STUDIO .NET, C++, Universal Windows Platform!!!!!! :)
Search DLLS, if "clrjit.dll" found, suspend process and dump.
just de4dot it!
https://github.com/0xd4d/de4dot
hofingerandi
https://www.codeproject.com/Articles/230005/Launch-a-process-suspended
https://www.codeproject.com/script/Membership/View.aspx?mid=5989023