·
50 commits
to 9af628c0e09510f6cd8c8be05f6c32214fda9d42
since this release
v2.1.1 updates:
- Statically link libraries, which removes the pre-install dependency on Microsoft Visual C++ Redistributable per suggestion from Blaine for easier integration to Mandiant FLARE-VM.
v2.1 updates:
- Fixed a bug where the last section in some cases would instead be filled with zeros. Thanks to megastupidmonkey for reporting this issue.
- Fixed a bug where 64-bit base addresses would be truncated to a 32-bit address. It now properly keeps the full 64-bit module base address. Thanks to megastupidmonkey for reporting this issue.
- Addressed an issue where the processes dump close monitor would crash csrss.exe.
- Stopped Process Dump from hooking it's own process in close monitor mode.
pd32.exe: Windows release for 32-bit OS's.
pd64.exe: Windows release for 64-bit OS's (recommended).