Commits

Breadcrumbs

History for

onmaster

User selector

All users

Datepicker

All time

Commit History

Commits on Oct 28, 2020

• Fix ayoubfaouzi#191 - Add Anti-VM disk enum registry checks

  recvfrom

  committed
  771f0e2

  Copy full SHA for 771f0e2

• Address code-review feedback

  recvfrom

  committed
  a2ace6e

  Copy full SHA for a2ace6e

Commits on Aug 11, 2020

• New Anti-Debug: Low Fragmentation Heap

  ayoubfaouzi

  committed
  cd4dc5c

  Copy full SHA for cd4dc5c

Commits on Jun 3, 2020

• Add Is Windows Genuine Check

  ayoubfaouzi

  committed
  c09c08b

  Copy full SHA for c09c08b

Commits on Feb 1, 2020

• add trap flag anti debug

  ayoubfaouzi

  committed
  d7fd5d8

  Copy full SHA for d7fd5d8

Commits on Jan 25, 2020

• add generic anti-sandbox (checking for well file names like malware.exe)

  ayoubfaouzi

  committed
  ff71355

  Copy full SHA for ff71355

Commits on Oct 14, 2019

• add few anti-disassembly tricks

  ayoubfaouzi

  committed
  d9caab6

  Copy full SHA for d9caab6

Commits on Apr 12, 2019

• Added note about removed binaries to the readme.

  gsuberland

  authored
  234233b

  Copy full SHA for 234233b

Commits on Apr 11, 2019

• add VideoController (Caption) WMI trick

  ayoubfaouzi

  committed
  b0fc777

  Copy full SHA for b0fc777

• Added developer guidelines link to readme.

  gsuberland

  authored
  f9be8bf

  Copy full SHA for f9be8bf

Commits on Jan 31, 2019

• bump to version 0.77

  ayoubfaouzi

  committed
  f98747f

  Copy full SHA for f98747f

Commits on Jan 19, 2019

• bump to version 0.76

  ayoubfaouzi

  committed
  5f5e269

  Copy full SHA for 5f5e269

Commits on Oct 20, 2018

• Merge branch 'master' into wudf-debugger-checks

  gsuberland

  committed
  ef4df3b

  Copy full SHA for ef4df3b

• Added WUDFPlatform.dll debugger checks

  Show description for bdfced3
  gsuberland

  committed
  bdfced3

  Copy full SHA for bdfced3

Commits on Sep 6, 2018

• add WMI Win32_Fan anti-vm trick

  ayoubfaouzi

  committed
  a76ee0e

  Copy full SHA for a76ee0e

Commits on Jul 29, 2018

• Added LdrEnumerateLoadedModules anti-injection check, thanks to @mq1n for the heads up

  gsuberland

  committed
  148638b

  Copy full SHA for 148638b

• Updated readme

  gsuberland

  committed
  da98ee5

  Copy full SHA for da98ee5

Commits on Jul 23, 2018

• Updated readme to include hook detection

  gsuberland

  committed
  6a1bdfd

  Copy full SHA for 6a1bdfd

• ... does help if I increment the version number in the readme too, doesn't it? :P

  gsuberland

  committed
  45f9fea

  Copy full SHA for 45f9fea

• Fix download URL in readme

  gsuberland

  committed
  4186e20

  Copy full SHA for 4186e20

• Release v0.75

  gsuberland

  committed
  4e74e20

  Copy full SHA for 4e74e20

Commits on Jul 17, 2018

• Fixed typo in README

  gsuberland

  committed
  9e34714

  Copy full SHA for 9e34714

Commits on Jul 10, 2018

• Added CreateWaitableTimer and CreateTimerQueueTimer checks.

  Show description for 8a2f1e8
  gsuberland

  committed
  8a2f1e8

  Copy full SHA for 8a2f1e8

Commits on May 28, 2018

• Added power capabilities checks.

  Show description for 4b71d41
  gsuberland

  committed
  4b71d41

  Copy full SHA for 4b71d41

Commits on Apr 30, 2018

• Added Anti-VM check using WMI (Select ProcessorId from Win32_Processor) used by (GravityRAT)

  ayoubfaouzi

  committed
  8308255

  Copy full SHA for 8308255

Commits on Apr 27, 2018

• Added Anti-VM check for current CPU temperature using WMI (Select CurrentTemperature from MSAcpi_ThermalZoneTemperature) used by (GravityRAT)

  ayoubfaouzi

  committed
  a175d18

  Copy full SHA for a175d18

• Added Anti-VM check which look for MAC address (Paralles and Xen) used by (GravityRAT)

  ayoubfaouzi

  committed
  8cb2ffc

  Copy full SHA for 8cb2ffc

• Added Anti-VM check using WMI (Select Model/Manufacturer from Win32_ComputerSystem) used by (GravityRAT)

  ayoubfaouzi

  committed
  c8e52d9

  Copy full SHA for c8e52d9

• Added Hyper-V/VirtualPC anti-VM checks (GravityRAT)

  ayoubfaouzi

  committed
  6628e55

  Copy full SHA for 6628e55

Commits on Apr 24, 2018

• Added firmware table checks SMBIOS and ACPI (Qemu)

  ayoubfaouzi

  committed
  135e50f

  Copy full SHA for 135e50f

Commits on Apr 23, 2018

• added qemu process check (qemu-ga.exe)

  ayoubfaouzi

  committed
  338857e

  Copy full SHA for 338857e

Commits on Mar 14, 2018

• add some macros to enable/disable category for checks to easy debugging

  ayoubfaouzi

  committed
  a329f85

  Copy full SHA for a329f85

• add anti-vm check for vmware using system firmware tables

  ayoubfaouzi

  committed
  daf7077

  Copy full SHA for daf7077

Commits on Feb 28, 2018

• Add more checks for VMware related processes

  ayoubfaouzi

  committed
  fc694d0

  Copy full SHA for fc694d0

• Add checks for VMware related files

  ayoubfaouzi

  committed
  1179c52

  Copy full SHA for 1179c52

Pagination

Previous

Next