2 ms·
> It doesnt use virtualization but rather hooks the APIs and redirects them to "in folder structure" Do they do it in a filesystem filter driver or similar? Ho
by asveikau 7y ago
> It doesnt use virtualization but rather hooks the APIs and redirects them to "in folder structure"
Do they do it in a filesystem filter driver or similar? Hooking DLL calls in user mode is not really a secure way to do this.