<p>sitting next to a girl who&#39;s looking at a sample of malware. she&#39;s currently advocating &quot;running the malware to dump the arguments to NtWriteVirtualMemory and killing it before it does the malware things&quot;</p>