Detect when application is running in a VM environment

StackOverflow https://stackoverflow.com/questions/2375658

  •  24-09-2019
  •  | 
  •  

Question

Looking for ideas on how to detect when our Windows application is running in one of the following VM environments. Some starter ideas for detection are in parentheses. There may be (much) better detection techniques - the starter ideas I've come up with are based on my Google research.

  • VMWare (looking for the presence of optional VMware Tools is one way)

  • Microsoft Virtual PC (have a device named "Virtual HD" for their IDE disks, "MS Virtual SCSI Disk Device" for their SCSI disks)

  • Citrix Xen

  • Sun Virtual Box

Thank you, Malcolm

Was it helpful?

Solution

See BluePill which the author claimed as undetectable, causing a large negative response from the security community that quickly developed several ways to determine if you are in a VM. The best of which seem to be based on timing.

OTHER TIPS

This looks promising - it has an exe and .c file download.

Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow
scroll top