Page 1 of 1

Inject multiple dlls with CreateProcessExW

Posted: Wed Nov 20, 2019 11:19 am
by hardik.choudhary
Hi, as far as I know, createProcessExW allows us to inject a single dll, at the time of process creation. Is there a way to inject multiple dlls with createProcessExW?
Thanks in advance.

Re: Inject multiple dlls with CreateProcessExW

Posted: Wed Nov 20, 2019 1:31 pm
by madshi
All CreateProcessEx does inside is:

1) CreateProcess with CREATE_SUSPENDED.
2) InjectLibrary
3) ResumeThread

You can do the same, but with multiple InjectLibrary calls to inject multiple dlls. The trick here is that creating the process in suspended state (and keeping it that way during injection) allows madCodeHook to use a different injection method.