57 lines
1.7 KiB
Markdown
57 lines
1.7 KiB
Markdown
# DllFinder
|
|
A simple tool to find manual mapped DLLs in a target process.
|
|
|
|
# Usage
|
|
`DllFinder.exe [PID`
|
|
|
|
# Example output
|
|
```
|
|
C:\Users\patate>DllFinder.exe 11828
|
|
PID : 11828
|
|
notepad.exe --> 0x00007FF7972A0000
|
|
ntdll.dll --> 0x00007FFBBF6F0000
|
|
KERNEL32.DLL --> 0x00007FFBBF3E0000
|
|
KERNELBASE.dll --> 0x00007FFBBCEB0000
|
|
GDI32.dll --> 0x00007FFBBDEC0000
|
|
win32u.dll --> 0x00007FFBBCDD0000
|
|
gdi32full.dll --> 0x00007FFBBD630000
|
|
msvcp_win.dll --> 0x00007FFBBD1B0000
|
|
ucrtbase.dll --> 0x00007FFBBD280000
|
|
USER32.dll --> 0x00007FFBBED70000
|
|
combase.dll --> 0x00007FFBBDA30000
|
|
RPCRT4.dll --> 0x00007FFBBEB20000
|
|
shcore.dll --> 0x00007FFBBF600000
|
|
msvcrt.dll --> 0x00007FFBBE6B0000
|
|
COMCTL32.dll --> 0x00007FFBA4BB0000
|
|
IMM32.DLL --> 0x00007FFBBD980000
|
|
bcryptPrimitives.dll --> 0x00007FFBBD4E0000
|
|
ADVAPI32.dll --> 0x00007FFBBF4B0000
|
|
sechost.dll --> 0x00007FFBBF560000
|
|
kernel.appcore.dll --> 0x00007FFBBAC90000
|
|
uxtheme.dll --> 0x00007FFBBA7C0000
|
|
clbcatq.dll --> 0x00007FFBBD8D0000
|
|
MrmCoreR.dll --> 0x00007FFBAB9C0000
|
|
SHELL32.dll --> 0x00007FFBBDEF0000
|
|
windows.storage.dll --> 0x00007FFBBAE90000
|
|
Wldp.dll --> 0x00007FFBBC810000
|
|
shlwapi.dll --> 0x00007FFBBF380000
|
|
MSCTF.dll --> 0x00007FFBBEC50000
|
|
OLEAUT32.dll --> 0x00007FFBBEA50000
|
|
TextShaping.dll --> 0x00007FFBAF610000
|
|
efswrt.dll --> 0x00007FFB9E060000
|
|
MPR.dll --> 0x00007FFBA0C50000
|
|
wintypes.dll --> 0x00007FFBB9960000
|
|
twinapi.appcore.dll --> 0x00007FFBB6B80000
|
|
oleacc.dll --> 0x00007FFBA4A50000
|
|
textinputframework.dll --> 0x00007FFBABEF0000
|
|
CoreMessaging.dll --> 0x00007FFBBA390000
|
|
WS2_32.dll --> 0x00007FFBBE900000
|
|
CoreUIComponents.dll --> 0x00007FFBBA030000
|
|
ntmarta.dll --> 0x00007FFBBBF30000
|
|
vcruntime140.dll --> 0x00007FFB9F640000
|
|
Found 41 modules.
|
|
Finding manual mapped dlls..
|
|
|
|
Module found --> 0x0000000180000000
|
|
Found 1 modules.
|
|
``` |