admin/volatilityfoundation-volatility
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility synced 2026-06-08 18:04:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

add wininet.dll to the list of DLLs checked by apihooks when --quick is supplied

Browse Source
This commit is contained in:
iMHLv2
2013-07-03 01:28:59 +00:00
parent a32dfefac3
commit a140a2fa41
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/plugins/malware/apihooks.py
+1 -1
View File
@@ -359,7 +359,7 @@ class ApiHooks(procdump.ProcExeDump):
"advapi32.dll", "secur32.dll", "crypt32.dll", "user32.dll",
"gdi32.dll", "shell32.dll", "shlwapi.dll", "lsasrv.dll",
"cryptdll.dll", "wsock32.dll", "mswsock.dll", "urlmon.dll",
"csrsrv.dll", "winsrv.dll"]
"csrsrv.dll", "winsrv.dll", "wininet.dll"]
# When scanning for calls to unknown code pages (UCP), only
# analyze the following drivers. This is based on an analysis of