You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
yield"The ImageBaseAddress reported from the PEB ({:#x}) does not match the process SectionBaseAddress ({:#x})".format(image_base, proc.SectionBaseAddress)
114
+
yield"The ImageBaseAddress reported from the PEB ({:#x}) does not match the process SectionBaseAddress ({:#x})".format(
115
+
image_base, proc.SectionBaseAddress
116
+
)
115
117
116
118
def_check_exe_protection(self, proc, vads, __):
117
119
base=proc.SectionBaseAddress
118
120
119
121
ifbasenotinvads:
120
-
yield"There is no VAD starting at the base address of the process executable ({:#x})".format(base)
122
+
yield"There is no VAD starting at the base address of the process executable ({:#x})".format(
yield"Unexpected protection ({}) for DLL in the PEB's load order list ({:#x}) with path {}".format(vads[dll_base].protection, dll_base, dlls[dll_base].path)
137
+
yield"Unexpected protection ({}) for DLL in the PEB's load order list ({:#x}) with path {}".format(
0 commit comments