unhide finding invalid HIDDEN PID items

Open ghbittwister opened this issue 4 years ago • 0 comments

unhide finding invalid HIDDEN PID items. I get 451 hits. Two examples:

[*]Starting scanning using brute force against PIDS with fork()

Found HIDDEN PID: 4150500 Cmdline: "" Executable: "" " ... maybe a transitory process"

Found HIDDEN PID: 4150506

Also note the above pid values. Way too large.

unhide --version

Unhide 20200120

Jul 13 '20 16:07 ghbittwister