malware checking for security software

malware often attempts to determine if security tools or reverse engineering software is running on a host as a defensive measure. The malware, if it determines that it is being analyzed, can alter its execution flow to thwart analysis.

---