Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
BSD 2-Clause "Simplified" License
3.01k
stars
421
forks
source link
Crash during scan (Ursnif) #28
Closed
hasherezade closed 5 years ago
Test case
633521d921ddad8671293319f0fd9daab9a0a606887ada3ab3709027cbb1e591 - Ursnif
Problem
During the workingset scan PE-sieve crashes:
This bug is present in version 0.1.6, but not in 0.1.5.