No, libpeconv is not meant for any detection. As mentioned in the description it is "a library to load, manipulate, dump PE files". If you are looking for some tool for detection of process hollowing, check my another project, PE-sieve: https://github.com/hasherezade/pe-sieve
No, libpeconv is not meant for any detection. As mentioned in the description it is "a library to load, manipulate, dump PE files". If you are looking for some tool for detection of process hollowing, check my another project, PE-sieve: https://github.com/hasherezade/pe-sieve