[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Qemu-devel] org. cpuid passthru for qemu guest
From: |
Holger Unterbrink (hunterbr) |
Subject: |
[Qemu-devel] org. cpuid passthru for qemu guest |
Date: |
Tue, 5 Aug 2014 19:14:11 +0000 |
Hi, is there any cmdline switch to hide virtualization to the guest OS ? Afaik
qemu intercepts the cupid instruction (EAX=0x1) and always sets Bit 31 in ECX
for virtualization ?
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1009458
For malware analysis, I am trying to obfuscate as much as possible to the guest
OS that it is running in a virtualized environment.
thx,
holger
[Prev in Thread] |
Current Thread |
[Next in Thread] |
- [Qemu-devel] org. cpuid passthru for qemu guest,
Holger Unterbrink (hunterbr) <=