This RSE thread and this one discuss effectiveness of RDTSC-based anti-debug methods, and also a way to possibly work-around (albeit using a fake driver method, which is complex).

What is a counter-measure to this ? My thought was to look for possible side-effects of "slow motion time", for example comparing with NTP time, file date/timestamp problems, etc.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.