Skip to content

Instantly share code, notes, and snippets.

@1UC1F3R616
Created August 29, 2020 19:19
Show Gist options
  • Save 1UC1F3R616/3689fe310a64ec36ff68a0419e2a7b83 to your computer and use it in GitHub Desktop.
Save 1UC1F3R616/3689fe310a64ec36ff68a0419e2a7b83 to your computer and use it in GitHub Desktop.
.\volatility.exe -f cridex.vmem imageinfo
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 pslist
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 netscan
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 psxview
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 ldrmodules
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 apihooks
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 malfind -D cridex_dump
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 dlllist
.\volatility.exe -f .\cridex.vmem --profile=WinXPSP2x86 --pid=584 dlldump -D .\cridex_dump\
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment