This function is already hooked. Maybe it's a bug. Please send me the binary which detects it.
Quote:
Originally Posted by sendersu
Hi ferrit
how about processing this method of detecting?
ntdll.NtQueryInformationProcess()
I've a target that is using it.
|