Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

help me fix these detection please #80

Open
Edan11 opened this issue Feb 14, 2024 · 2 comments
Open

help me fix these detection please #80

Edan11 opened this issue Feb 14, 2024 · 2 comments

Comments

@Edan11
Copy link

Edan11 commented Feb 14, 2024

  • Pafish (Paranoid Fish) *

[-] Windows version: 6.2 build 9200
[-] Running in WoW64: False
[-] CPU: GenuineIntel
Hypervisor: ♦►
CPU brand: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz

[-] Debuggers detection
[] Using IsDebuggerPresent() ... OK
[
] Using BeingDebugged via PEB access ... OK

[-] CPU information based detections
[] Checking the difference between CPU timestamp counters (rdtsc) ... OK
[
] Checking the difference between CPU timestamp counters (rdtsc) forcing VM exit ... OK
[] Checking hypervisor bit in cpuid feature bits ... OK
[
] Checking cpuid hypervisor vendor for known VM vendors ... OK

[-] Generic reverse turing tests
[] Checking mouse presence ... OK
[
] Checking mouse movement ... traced!
[] Checking mouse speed ... traced!
[
] Checking mouse click activity ... traced!
[] Checking mouse double click activity ... traced!
[
] Checking dialog confirmation ... OK
[*] Checking plausible dialog confirmation ... OK

[-] Generic sandbox detection
[] Checking username ... OK
[
] Checking file path ... OK
[] Checking common sample names in drives root ... OK
[
] Checking if disk size <= 60GB via DeviceIoControl() ... OK
[] Checking if disk size <= 60GB via GetDiskFreeSpaceExA() ... OK
[
] Checking if Sleep() is patched using GetTickCount() ... OK
[] Checking if NumberOfProcessors is < 2 via PEB access ... OK
[
] Checking if NumberOfProcessors is < 2 via GetSystemInfo() ... OK
[] Checking if pysical memory is < 1Gb ... OK
[
] Checking operating system uptime using GetTickCount() ... OK
[*] Checking if operating system IsNativeVhdBoot() ... OK

[-] Sandboxie detection
[*] Using GetModuleHandle(sbiedll.dll) ... OK

[-] Wine detection
[] Using GetProcAddress(wine_get_unix_file_name) from kernel32.dll ... OK
[
] Reg key (HKCU\SOFTWARE\Wine) ... OK

[-] VirtualBox detection
[] Scsi port->bus->target id->logical unit id-> 0 identifier ... OK
[
] Reg key (HKLM\HARDWARE\Description\System "SystemBiosVersion") ... OK
[] Reg key (HKLM\SOFTWARE\Oracle\VirtualBox Guest Additions) ... OK
[
] Reg key (HKLM\HARDWARE\Description\System "VideoBiosVersion") ... OK
[] Reg key (HKLM\HARDWARE\ACPI\DSDT\VBOX__) ... OK
[
] Reg key (HKLM\HARDWARE\ACPI\FADT\VBOX__) ... OK
[] Reg key (HKLM\HARDWARE\ACPI\RSDT\VBOX__) ... OK
[
] Reg key (HKLM\SYSTEM\ControlSet001\Services\VBox*) ... OK
[] Reg key (HKLM\HARDWARE\DESCRIPTION\System "SystemBiosDate") ... OK
[
] Driver files in C:\WINDOWS\system32\drivers\VBox* ... OK
[] Additional system files ... OK
[
] Looking for a MAC address starting with 08:00:27 ... OK
[] Looking for pseudo devices ... OK
[
] Looking for VBoxTray windows ... OK
[] Looking for VBox network share ... OK
[
] Looking for VBox processes (vboxservice.exe, vboxtray.exe) ... OK
[*] Looking for VBox devices using WMI ... OK

[-] VMware detection
[] Scsi port 0,1,2 ->bus->target id->logical unit id-> 0 identifier ... OK
[
] Reg key (HKLM\SOFTWARE\VMware, Inc.\VMware Tools) ... OK
[] Looking for C:\WINDOWS\system32\drivers\vmmouse.sys ... OK
[
] Looking for C:\WINDOWS\system32\drivers\vmhgfs.sys ... OK
[] Looking for a MAC address starting with 00:05:69, 00:0C:29, 00:1C:14 or 00:50:56 ... traced!
[
] Looking for network adapter name ... traced!
[] Looking for pseudo devices ... traced!
[
] Looking for VMware serial number ... OK

[-] Qemu detection
[] Scsi port->bus->target id->logical unit id-> 0 identifier ... OK
[
] Reg key (HKLM\HARDWARE\Description\System "SystemBiosVersion") ... OK
[*] cpuid CPU brand string 'QEMU Virtual CPU' ... OK

[-] Bochs detection
[] Reg key (HKLM\HARDWARE\Description\System "SystemBiosVersion") ... OK
[
] cpuid AMD wrong value for processor name ... OK
[*] cpuid Intel wrong value for processor name ... OK

[-] Pafish has finished analyzing the system, check the log file for more information
and visit the project's site:

https://github.com/a0rtega/pafish
@chomikFajny
Copy link

change your mac adress and change your disk name and to the mouse checks i think changing dpi would fix it

@Edan11
Copy link
Author

Edan11 commented Jun 19, 2024

  1. Issue not related to the project
  2. You are obviously trying to create malware

its for vmware detection,
and i dont even now how to code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants