Skip to content
This repository has been archived by the owner on Aug 14, 2023. It is now read-only.

IsDebuggerPresent

Jump to bottom
Мрак edited this page Jun 12, 2022 · 1 revision

IsDebuggerPresent

The function kernel32!IsDebuggerPresent() determines whether the current process is being debugged by a user-mode debugger such as OllyDbg or x64dbg. Generally, the function only checks the BeingDebugged flag of the Process Environment Block (PEB).

Reference

Anti-Debug Tricks

Clone this wiki locally