Hi Dw.
How to check if the running process has been injected by another process or there is another process running as another process.
What I mean is, let's say the explorer has been injected by another process and both these processes run as one process and the explorer process will normally consume lots of memory when being injected, so the main question is how to get this, or I will have to use the hashing?
But I think hashing will course problems as if a new or another explorer is opened, but I'm not sure of this yet.