Giters

a0rtega / pafish

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Virtual Box rdtsc

Tribiune opened this issue · comments

commented

Hello and sorry for posting here. I am using Virtual box and i am trying to make Windows 10 as stealthier as possible. Solved all pafish detections except the two rdtsc ones. I would be thankful if anyone can help with these.

Checking the difference between CPU timestamp counters (rdtsc)
Checking the difference between CPU timestamp counters (rdtsc) forcing VM exit

commented

We have a few issues discussing this, see #68 and #63. There are also many sources on the internet on the subject.

I don't have a solution to fix those. The only reliable way I found in the past to avoid these detections was using QEMU in full system emulation mode (not virtualization).

commented

Thanks a lot for your response and sharing your knowledge!