Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).
BSD 2-Clause "Simplified" License
3.03k
stars
423
forks
source link
Find manually loaded PE files that are not aligned to the begining of a page #5
Closed
hasherezade closed 6 years ago