amsi-bypass 3 VerShadow / FUD Crypt: A MinGW VERSION.dll Carrier With A Catbox Fallback And A Live Test Payload Apr 26, 2026 DcRAT in 48KB: Cracking the Config, Mapping the Plugin Loader, and Why the Stub IS the Malware Apr 10, 2026 Stage1 (22.exe) Loader Reversing, Part I: Stage Decryption, Evasion, and Attribution Feb 23, 2026