ek0ms savi0r ek0mssavi0r
Zig DLL with ChaCha20 encrypted sleep, indirect syscalls, synthetic callstack frames, and HWBP AMSI/ETW bypass for Sliver implants
Updated 2026-07-19 00:20:19 +00:00