Created
August 29, 2020 19:19
-
-
Save 1UC1F3R616/3689fe310a64ec36ff68a0419e2a7b83 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
.\volatility.exe -f cridex.vmem imageinfo | |
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 pslist | |
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 netscan | |
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 psxview | |
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 ldrmodules | |
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 apihooks | |
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 malfind -D cridex_dump | |
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 dlllist | |
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 --pid=584 dlldump -D .\cridex_dump\ |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment