Determine obfuscate .net app

[henk]

Hello all,

I need some help to determine the obfuscation on this file: http://rapidshare.com/files/376502042/FiatECUScan2.exe.html

It is a .net application and i can open it with reflector, but all strings are represented as blocks and in the code it uses "&h..." format for strings.

If anyone can point me in the right direction how to make the strings visible?

Thanks!

[bball0002]

Doesn't matter what it is, SimpleAssemblyExplorer decrypts the strings fine :).

Here is your file with all strings decrypted (although both error out on Windows 7): http://www.sendspace.com/file/qmol6s

How to:

1. Download SAE: http://simple-assembly-explorer.googlecode.com/files/SAE.v1.10.1.7z

2. Open it and navigate to the target file

3. Right-click and click "Deobfuscator"

4. Uncheck everything except for the "String Options" and leave it as "Automatic".

Hope it helped.

[henk]

Great!

That worked like a charm! thanks for the info.