Files
fscan/common
ZacharyZcR bf210dd94d refactor: minidump 实现降级链凭据提取
不再检测到杀软就直接退出,改为三级降级:
1. 直接 MiniDumpWriteDump(无杀软时尝试,15秒超时)
2. comsvcs.dll(系统签名DLL,部分杀软不拦截)
3. reg save SAM/SECURITY/SYSTEM(离线方式,不碰 LSASS)
全部失败才退出,0.2 秒完成不会卡死系统
2026-05-16 06:51:42 +08:00
..
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 17:32:28 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00
2026-05-13 14:41:23 +08:00