zinebbe

This is what I get when running the winpmem.exe -l command: C:\Users\User\Desktop\WinPmem-master\kernel\executable\Debug>winpmem.exe -l WinPmem64 Extracting driver to C:\Users\User\AppData\Local\Temp\pme7563.tmp Driver Unloaded. Loaded Driver C:\Users\User\AppData\Local\Temp\pme7563.tmp. Deleting C:\Users\User\AppData\Local\Temp\pme7563.tmp On Mon, Nov 23, 2020...

here is the outpu: C:\Users\User\Desktop\WinPmem-master\kernel\executable\Debug>sc.exe query winpmem SERVICE_NAME: winpmem TYPE : 1 KERNEL_DRIVER STATE : 1 STOPPED WIN32_EXIT_CODE : 31 (0x1f) SERVICE_EXIT_CODE : 0 (0x0) CHECKPOINT : 0x0 WAIT_HINT :...

So why is the state stopped? Aslo how to take a memory image please? On Mon, Nov 23, 2020 at 8:41 PM Zineb Benameur-El Youbi wrote: > here is the...

I actually built the source code to get the .exe file. Could you please point me to the release page where I can find the .exe file to run? (I...

Thank you for your response. Here is the output: C:\Users\User\Desktop\WinPmem-master>winpmem_mini_x64_rc2.exe foo.dd WinPmem64 Extracting driver to C:\Users\User\AppData\Local\Temp\pme5B65.tmp Driver Unloaded. Loaded Driver C:\Users\User\AppData\Local\Temp\pme5B65.tmp. Deleting C:\Users\User\AppData\Local\Temp\pme5B65.tmp The system time is: 02:18:37 Will generate...