Zynap’s Next-Gen Sandbox redefines Automatic Malware Analysis

Zynap Sandbox implements a hookless instrumentation technique that controls memory page permissions at the process boundary to generate controlled exceptions whenever malicious code attempts to execute in system DLL pages; this produces complete, high-fidelity records of Windows API calls (including caller address, registers, parameters and referenced strings) while avoiding the scalability and maintenance problems of enumerated hooks and improving resistance to anti-analysis techniques.