Skip to content

v0.1.4

Compare
Choose a tag to compare
@hasherezade hasherezade released this 18 Aug 16:38
· 1375 commits to master since this release

Faster & more accurate

REFACTORING & OPTIMIZATION

  • refactored workingset scan to improve performance
  • refactored code scan to improve accuracy of detecting hooks & patches

FEATURE

  • reconstructing payloads with partially corrupt headers
  • recognizing the payload's extension (dll or exe)
  • improved JSON formatting
  • scan all the sections that are executable in memory (even if they are not marked executable in headers) - improved detection and dumping of the packed sections
  • improved reporting of Process Doppelgänging