Hi all! I need a simple function, which would extract from EPROCESS path to main executable and calculate from it CRC hash.
Function must be able to work with XP, Vista, 7 (x32/x64)
Your code must work in kernel driver
2 freelancers estão ofertando em média $63 para esse trabalho
I have experience in Windows kernel-mode and I can handle this problem. Btw I want to know more details: what kind of executable path do you want to retrieve (the 13 characters path or the fullpath)?