Strange question about CreateRemoteThread

		Exetools > General > General Discussion
Strange question about CreateRemoteThread

Thread Tools

Display Modes

06-04-2020, 23:56

chants

VIP

Join Date: Jul 2016

Posts: 826

Rept. Given: 47

Rept. Rcvd 50 Times in 31 Posts

Thanks Given: 737

Thanks Rcvd at 1,140 Times in 529 Posts

Are you sure there are no statically loaded DLLs into that process that are creating the threads either from the original process or loaded DLL? There can be lots of DLLMain codes running in that process not to mention the one WinMain. You probably have to check the DLL import list recursively from the process and for your injected DLL.

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is Off HTML code is Off Forum Rules

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Strange RSA modulus N value	TempoMat	General Discussion	8	12-22-2017 10:36

All times are GMT +8. The time now is 00:33.