[Vol-users] Option 2 for injected malware extraction