Feed Misinformation During Physical Memory Acquisition

Description	The 'feed misinformation during physical memory acquisition' value indicates that the malware instance is able to report inaccurate data when the content of physical memory is retrieved.
Relationships	Child of Anti-Detection [C] Child of Anti-Memory Forensics [TO]
References
Examples