doomedraven

Results 308 comments of doomedraven
trafficstars

you can use `process.py -r X -sig -sn ` to debug uniq sig

now i found case where signature is matched but cape says it not matched, investigating

i just pushed fix for my case, please do git pull and try again

What win10 build and version? El jue., 23 jun. 2022 20:25, Scrub Lullz ***@***.***> escribió: > I was able to get full execution in my Win10 VM's if any data...

Thanks, mine 22h2 El jue., 23 jun. 2022 20:47, Scrub Lullz ***@***.***> escribió: > Version 21H1 OS Build 19043.1023 > Office 2010 > > — > Reply to this email...

i still finishing my porting but when im using the vadyarascan it goes super fast, and when i read each vad and scan is damn slow

Hello @iMHLv2 yes, and this works just fine on Volatility2, that is why i was surprised ``` scanner = malfind.VadYaraScanner(task=task, rules=rules) for hit, addr in scanner.scan(): ```

you don't need to specify `file=x.exe`?