CreateRemoteThread() Dumping
Hey Guys!
I have a injector, It injects a DLL into a said process using the CreateRemoteThread() method, I was wondering if I could somehow dump the dll being injected?
I have set a breakpoint on the function address but can't seem to dump the DLL.
Any help would be appreciated.
Cheers, Dylanger
Attach a debugger like OllyDBG and use the OllyDump plugin. Also try Task Explorer from the Explorer Suite, it can dump modules/DLLs too.