fork1488/MemHide

Just set fake PID in PEPROCESS

MemHide

Original idea-> https://www.xuenixiang.com/thread-2679-1-1.html
Process hacker find process ->

Set fake PID ->

Process hacker finds a duplicate ->

x64dbg try find process ->