Welcome back.
We are now going to compile and build our movie, so let's copy this back here.
Open the x64 native to its command problem and then change to our copy to right clicking here, piecing
it heading into.
And now we'll call the compiler script to do the whole way.
So what says Bill?
You can run it.
You enter.
And you will see he brings up the debugging information showing you the address of the builder and race
the remote code expert in, say, the Microsoft Paint.
So as you press and Ted, continue continues, we enter.
And I could hear that beep and you can see the icon at the bottom here for Microsoft page.
If I click on it, I will see that it is actually showing the message box by the Microsoft Paint window.
Yes, not sure at all.
So this is actually camouflaged inside this icon.
The Microsoft Bing icon.
So now let's examine this in process, hacker.
And if we go down to the Microsoft pain down here, you will see is running as Microsoft being too far
to it.
And let's try to track this to find Windows Central to the message box, and he kind of confirmed it.
The parent for this message box is indeed Microsoft paid with the iPad two four two eight, which is
designed here to for.
And if you want to see the shark in memory for Microsoft Paint, you can head over to the memory tech
here and then you scroll down.
You'll be able to look for in the X protection region, which is here which is sanmar, and we double
click on this.
You see the shark.
What is it?
OK, so this is how you can use early but epic ingestion to camouflage the chocolate.
That's all for this practical virtue.
Thank you for watching.