v0.3.1.3
BUGFIX
- Fixed invalid condition check on scanning data (Issue #93)
- In imp rec auto mode (
/imp 1
): do not overwrite import table of .NET modules (it was destroying imports) (Issue #89) - Improved detection if a PE is in a virtual or raw mode - fixed an issue in dumping of some PEs
- Improvements in code scan (Issue #15)
- Improved reporting of unreachable modules
See also HollowsHunter: https://github.com/hasherezade/hollows_hunter/releases/tag/v0.3.1.3