Skip to content
/ shymem Public

make memory scanners take forever to scan your program

Notifications You must be signed in to change notification settings

riesha/shymem

Repository files navigation

shymem

Hinders scanning of your process's memory by creating huge section views that slow down memory scanners. Based on this secret.club article with the addition of using transacted files instead of existing ones.

The maximum size of the created views depends on how much ram is on your system and how many times you manage to call NtMapViewOfSection, here it is tested on a system with 64gigs of ram.

Alt text

Here's how long a pesieve scan takes on my system with 16gigs of ram

Alt text

WARNING

can cause BSODs although i have not managed to figure out how and why it happens since it has only happened once.

Alt text

About

make memory scanners take forever to scan your program

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages