• Sofar we have only looked at the `filename` attribute but in malware
    samples the path has been empty and windows used src_path or tmp_path
    to determine dumped file type.
    
    Look at all 3 filenames/paths, try to preserve suffix but still limit
    length of resulting file name. Deal with multiple objects of same
    resulting filename by offering random file names
    Christian Herdtweck authored
     
    Browse Dir »