Ghidra: EditBytesScript (to fix/manipulate PE header to load ShadowHammer setup.exe sample) 🔗 External Link