Search For Content
Search Result
1 item(s) found so far for this keyword.
NtQueryInformationProcess
This function retrieves information about a running process. Malware are able to detect if the process is currently being attached to a debugger using the ProcessDebugPort (0x7) information class.
A nonzero value returned by the call indicates that the process is being debugged.
Read more