The Nightmare of Proc Hollow’s Exe

In the last blog on Parent Process ID (PPID) Spoofing, we discussed how to hide the malicious process by giving it a legit parent. In this blog, we are going to discuss yet another method of hiding malicious code, using Process Hollowing. At a high level, this is where malicious code launches a new process,...

The post The Nightmare of Proc Hollow’s Exe appeared first on TrustedSec.

blog code discuss hide high hollowing legit malicious malware analysis proc process process hollowing spoofing