Skip to content

Commit 7343fac

Browse files
committed
reduce false positives in anti-emu lists
1 parent 85b2553 commit 7343fac

1 file changed

Lines changed: 3 additions & 4 deletions

File tree

auth.cpp

Lines changed: 3 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -261,8 +261,7 @@ static bool suspicious_processes_present()
261261
const std::vector<std::string> bad = {
262262
"fiddler", "mitmproxy", "charles", "httpdebugger", "proxifier",
263263
"burpsuite", "wireshark", "tshark", "x64dbg", "x32dbg",
264-
"ollydbg", "ida", "cheatengine", "processhacker",
265-
"keyauth", "emulator"
264+
"ollydbg", "ida", "cheatengine", "processhacker"
266265
};
267266
HANDLE snap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
268267
if (snap == INVALID_HANDLE_VALUE)
@@ -288,7 +287,7 @@ static bool suspicious_modules_present()
288287
{
289288
const std::vector<std::string> bad = {
290289
"fiddlercore", "mitm", "charles", "httpdebugger", "proxifier",
291-
"keyauth", "emulator", "dbghelp", "symsrv", "detours"
290+
"detours"
292291
};
293292
HMODULE mods[1024];
294293
DWORD needed = 0;
@@ -311,7 +310,7 @@ static bool suspicious_windows_present()
311310
const std::vector<std::string> bad = {
312311
"fiddler", "mitmproxy", "charles", "burp", "http debugger",
313312
"x64dbg", "x32dbg", "ollydbg", "ida", "cheat engine",
314-
"process hacker", "keyauth", "emulator"
313+
"process hacker"
315314
};
316315
struct Ctx { const std::vector<std::string>* bad; bool hit; };
317316
Ctx ctx{ &bad, false };

0 commit comments

Comments
 (0)