hollows_hunter

hollows_hunter copied to clipboard

False Positives

3

Hi, at first **thank you a lot for your amazing work** and thank you for sharing your awesome tools. I have tested Hollow Hunter on **2 Windows machines** where I...

VirtualAlllocEx

Can't detect hollow process created by ursnif trojan

3

Hi hasherezade, Thanks for your great tool. I tested hollows_hunter, it can detect hollow process created by Agenttesla, fareit, formbook. However, it can't detect iexplore.exe created by ursnif trojan. You...

shelovemee

Enable cache by default, first checking how much memory can be used with the help of [`GlobalMemoryStatusEx`](https://learn.microsoft.com/en-us/windows/win32/api/sysinfoapi/nf-sysinfoapi-globalmemorystatusex)

hasherezade