3 ms·
You can use those APIs but AV and dynamic sandbox analysis solutions look for samples that make decisions based on the return value of those functions.
by badrabbit 9y ago
You can use those APIs but AV and dynamic sandbox analysis solutions look for samples that make decisions based on the return value of those functions.
- hypervis0r 9y agoNot really. The amount of samples that check for debuggers is surprisingly high, and thus makes such red flag unusable. It'd just spam false positives.