RT @ForensicITGuy: New blog post- not about Crowdstrike, but about tearing into a JPHP-based loader <a href="https://forensicitguy.github.io/decompiling-jphp-loader-binwalk-cfr/">https://forensicitguy.github.io/decompiling-jphp-loader-binwalk-cfr/</a> #Malware

Keith