search

NtQuery / Scylla

Imports Reconstructor
GNU General Public License v3.0
1.11k stars 233 forks source link

Add support for memory loaded DLLs #12

Open NtQuery opened 12 years ago

NtQuery commented 12 years ago

Malware and Game-Cheating-Software is using this technique. LoadLibrary API is not used. Not visible in the PEB, etc.