Classic RunPE (CreateProcess, NtGetContextThread, NtUnmapViewOfSection, NtWriteVirtualMemory, NtSetContextThread, NtResumeThread) using the Hell's Gate technique to evade usermode API monitoring by dynamically executing syscalls.
| Name | Name | Last commit date | ||
|---|---|---|---|---|
Classic RunPE (CreateProcess, NtGetContextThread, NtUnmapViewOfSection, NtWriteVirtualMemory, NtSetContextThread, NtResumeThread) using the Hell's Gate technique to evade usermode API monitoring by dynamically executing syscalls.