https://github.com/0xyg3n/mem64

Run Any Native PE file as a memory ONLY Payload , most likely as a shellcode using hta attack vector which interacts with Powershell.

executable memory-payload native pe

Last synced: 11 Apr 2025