v0.1.4
Faster & more accurate
REFACTORING & OPTIMIZATION
- refactored workingset scan to improve performance
- refactored code scan to improve accuracy of detecting hooks & patches
FEATURE
- reconstructing payloads with partially corrupt headers
- recognizing the payload's extension (dll or exe)
- improved JSON formatting
- scan all the sections that are executable in memory (even if they are not marked executable in headers) - improved detection and dumping of the packed sections
- improved reporting of Process Doppelgänging