Well, this loader has this features:
Fileless.
Sleep obfuscation.
Ntdll unhooker [TODO!].
Only use ntdll functions.
Does not use LoadLibrary, GetProcAddress etc.
Does not save the shellcode in the executable file ["Downloads" using sockets].
PS: My telegram is offline, contact me with e-mail (or from xss): n4sksx@proton.me
Wrote in C++, i accept escrow.
Guaranteed bypass SentinelOne, TrendMicro Maximum Security etc.
Av Bypass is guaranteed too: https://avcheck.net/id/yGhD9EvjI3zf
Fileless.
Sleep obfuscation.
Ntdll unhooker [TODO!].
Only use ntdll functions.
Does not use LoadLibrary, GetProcAddress etc.
Does not save the shellcode in the executable file ["Downloads" using sockets].
PS: My telegram is offline, contact me with e-mail (or from xss): n4sksx@proton.me
Wrote in C++, i accept escrow.
Guaranteed bypass SentinelOne, TrendMicro Maximum Security etc.
Av Bypass is guaranteed too: https://avcheck.net/id/yGhD9EvjI3zf