transacted_hollowing

transacted_hollowing copied to clipboard

Just a question

10

Hey there, the payload or malicious PE file should be on the fileytem here. Mostly it will be already fished away by AV, especially if it is malicious or suspicious...

hawaii67

Thanks for your work

1

Appreciate your work and it was inspiring! I studyed on this kind of hollowing based on your work. Hope you find this interesting. https://github.com/Hagrid29/herpaderply_hollowing

Hagrid29