v0.2.8
Updated PE-sieve (v0.2.8):
https://github.com/hasherezade/pe-sieve/releases/tag/v0.2.8
Changes in HollowsHunter (in addition to the changes in PE-sieve):
FEATURE
- Detailed info about a single parameter can be requested by:
/<parameter> ?
- Support the new modes in the
/data
parameter - Support the new parameter
/dnet
allowing to set treating .NET modules different than native ones - New colors of logo if run via Powershell
- Alert if the scanner has different bitness than the OS
- Display if the scanned process is 32 bit when scanning on 64 bit OS
- Alert about partially scanned processes (64 bit scanned by the 32 bit scanner)
BUGFIX
- Fixed switching back to the original console color after printing in color
REFACT
- Refactored parsing of the parameters
- Internal refactoring and cleanup of the scanner