Martin Fischer
Martin Fischer
Failed to create - by whom? This registry key can only be created with administrator privileges, which is done by r77. **Then**, the DACL is set up properly. So, you...
Hey there, can you give me a little detail here? Are you trying to disable connectivity for specific process ID's or for specific ports? And also, do you want to...
Sorry for the late response, I'm being kept busy by patching the AMSI fix for Windows Defender and next thing I've realized that Windows 24H2 broke RunPE for good, for...
Hey there. This is just a PoC that demonstrates a C# executable that morphs its own code. It isn't in and of itself useful, so you can't swap out the...
Nah... To protect a project from AV, use in-memory techniques. This is really just a PoC and can't be combined with unrelated techniques.
If you're developing your own crypter and decided that it should be morphing, then you can implement that, sure. All I'm saying is that you cannot use this PoC as...
Not sure what exactly you're up to. You can achieve a morphing binary, or any other type of obfuscation. AV isn't affected as much by the morphing of the binary...
RunPE is the keyword for you, if you want to run a native executable in memory. Good luck!
GPU usage is hidden, I implemented this in version 1.5.1 in 2023. CPU usage is hidden in some task managers. You can run the provided Example.exe, it has a ComboBox...