unload (unload the kernel modules)
Description of the 'unload' command in HyperDbg.
Command
unload
Syntax
unload [remove] [ModuleName (string)]
Description
Unloads the HyperDbg drivers and kernel modules from the target system.
Parameters
[remove](optional)
If you want to remove the installed driver. (See Remarks for more information)
[ModuleName (string)]
The name of the module that you want to unload.
Modules
vmm
Hypervisor-related capabilities
The debugger functions are implemented on top of the 'vmm' module.
vmm : this module contains commands related to the debugger and all hypervisor-related capabilities. Currently, vmm is the only module of HyperDbg.
Examples
The following example unloads vmm
module.
SDK
To unload the HyperDbg driver on the local machine, you need to use the following functions in libhyperdbg
:
Then,
Later you can uninstall the driver using the following SDK function:
Remarks
This command will continue the debuggee for some time (in Debugger Mode). This means that you lose the current context (registers & memory) after executing this command.
If you use the remove
argument, then the driver will be marked to be stopped and uninstalled. You cannot re-load that module again until the target machine is restarted.
Requirements
None
Related
Last updated