Reply to thread

Message

<blockquote data-quote="ScandinavianFish" data-source="post: 983341" data-attributes="member: 93786">Okay, so I did a quick test against 5 Javascript, 5 Powershell, 5 DLL and 5 Visual Basic Script files, as most of these files werent zero day I decided to turn off its Real Time Protection, only letting the Behavior blocker do the work, it did decent, though as I werent seeing any new processes (apart from some weird internet explorer) in memory or high CPU usage from Windows Script Host, Command processor/host or Powershell, I assumed those that went trough were VM-aware, so I decided to turn on Real Time Protection which caught all files except for one DLL file and one non-functional Javscript file, aswell as the&nbsp; weird, seemingly legit internet explorer taking up all the CPU.[URL unfurl=&quot;true&quot;]https://www.mediafire.com/file/rs0vutblepbt1oh/2022-04-09+21-22-31.mkv/file[/URL](Excuse the audio, forgot I had my microphone on)(I know this is probably not the correct way to do tests, but as I do my tests just for fun I tend to not do it in a ordely fashion)</blockquote>

[QUOTE="ScandinavianFish, post: 983341, member: 93786"] Okay, so I did a quick test against 5 Javascript, 5 Powershell, 5 DLL and 5 Visual Basic Script files, as most of these files werent zero day I decided to turn off its Real Time Protection, only letting the Behavior blocker do the work, it did decent, though as I werent seeing any new processes (apart from some weird internet explorer) in memory or high CPU usage from Windows Script Host, Command processor/host or Powershell, I assumed those that went trough were VM-aware, so I decided to turn on Real Time Protection which caught all files except for one DLL file and one non-functional Javscript file, aswell as the weird, seemingly legit internet explorer taking up all the CPU. [URL unfurl="true"]https://www.mediafire.com/file/rs0vutblepbt1oh/2022-04-09+21-22-31.mkv/file[/URL] [I](Excuse the audio, forgot I had my microphone on) (I know this is probably not the correct way to do tests, but as I do my tests just for fun I tend to not do it in a ordely fashion)[/I] [/QUOTE]

Verification