MalwareBazaar Database

This page shows some basic information the YARA rule INDICATOR_SUSPICIOUS_EXE_WindDefender_AntiEmaulation including corresponding malware samples.

Database Entry


YARA Rule:INDICATOR_SUSPICIOUS_EXE_WindDefender_AntiEmaulation
Author:ditekSHen
Description:Detects executables containing potential Windows Defender anti-emulation checks
Firstseen:2021-08-04 19:12:17 UTC
Lastseen:2021-10-20 06:21:44 UTC
Sightings:499

Malware Samples


The table below shows all malware samples that matching this particular YARA rule (max 1000).

Firstseen (UTC)SHA256 hashTagsSignatureReporter