diff --git a/Trickbot/img/Identification of Hollowed out processes/Loki.PNG b/Trickbot/img/Identification of Hollowed out processes/Loki.PNG new file mode 100644 index 0000000..9cb4df0 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/Loki.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/eql1.PNG b/Trickbot/img/Identification of Hollowed out processes/eql1.PNG new file mode 100644 index 0000000..02f4469 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/eql1.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/eql2.PNG b/Trickbot/img/Identification of Hollowed out processes/eql2.PNG new file mode 100644 index 0000000..084af54 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/eql2.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/eql3.PNG b/Trickbot/img/Identification of Hollowed out processes/eql3.PNG new file mode 100644 index 0000000..282316d Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/eql3.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/hollows_hunter1.PNG b/Trickbot/img/Identification of Hollowed out processes/hollows_hunter1.PNG new file mode 100644 index 0000000..a39b390 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/hollows_hunter1.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/strings1.PNG b/Trickbot/img/Identification of Hollowed out processes/strings1.PNG new file mode 100644 index 0000000..c8ba064 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/strings1.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/strings2.PNG b/Trickbot/img/Identification of Hollowed out processes/strings2.PNG new file mode 100644 index 0000000..8daad19 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/strings2.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/volatility2.PNG b/Trickbot/img/Identification of Hollowed out processes/volatility2.PNG new file mode 100644 index 0000000..52d43d1 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/volatility2.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/volatility3.PNG b/Trickbot/img/Identification of Hollowed out processes/volatility3.PNG new file mode 100644 index 0000000..d020586 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/volatility3.PNG differ diff --git a/Trickbot/img/Identification of Hollowed out processes/volatility4.PNG b/Trickbot/img/Identification of Hollowed out processes/volatility4.PNG new file mode 100644 index 0000000..10f4880 Binary files /dev/null and b/Trickbot/img/Identification of Hollowed out processes/volatility4.PNG differ