search for a driver/dll module that has a wanted section bigger than the size of your image
- The usermode program enumeratres system32\drivers based on if the wanted file is a module/driver
- If wanted file is a driver it checks if the enumerated driver is loaded in the system and if it is it skips it
- Retrieves size of wanted section of enumerated module/driver
- Checks if size of the section is bigger than the size of image
- Prints information about the enumerated potential module/driver
Note: this project was coded in less than an hour so it might have some bugs and the code is a mess
driverdllfinder.exe driver.sys/module.dll .section_name