1.1 new

Спасибо темному лорду что заработало

1.2 Hooka Shellcode syscall

cmd := "SharpHound.exe -c All"

"maldev func of syscall doesn't work silently, so i try NtQueueApcThreadEx syscall for bypass ntdll.dll"

also

• AES enc
  --string func for obfuscate shellcode