Search For Content
Search Result
1 item(s) found so far for this keyword.
IsDebugged Flag
While a process is running, the location of the PEB can be referenced by the location fs:[30h]. For anti-debugging, malware will use that location to check the BeingDebugged flag, which indicates whether the specified process is being debugged.