pe-sieve. Scans a given process, searching for the modules containing in-memory code modifications. When found, it dumps the modified PE.