2.1 Release 🎉

• added new function VM::detected_enums()
• added new brands:
  • Intel TDX
  • LKVM
  • AMD SEV
  • AMD SEV-ES
  • AMD SEV-SNP
  • Neko Project II
  • NoirVisor
  • Qihoo 360 Sandbox
  • nsjail
• added new techniques:
  • VM::TIMER
  • VM::GPU
  • VM::VM_DEVICES
  • VM::ACPI_TEMPERATURE
  • VM::VIRTUAL_PROCESSORS
  • VM::HYPERV_QUERY
  • VM::BAD_POOLS
  • VM::AMD_SEV
  • VM::AMD_THREAD_MISMATCH
  • VM::NATIVE_VHD
  • VM::VIRTUAL_REGISTRY
  • VM::FIRMWARE
  • VM::FILE_ACCESS_HISTORY
  • VM::AUDIO
  • VM::UNKNOWN_MANUFACTURER
  • VM::OSXSAVE
  • VM::NSJAIL_PID
  • VM::PCI_VM
• added new features to the CLI:
  • added brand descriptions
  • added --mit and --enums oprions
  • renamed --no-color option with --no-ansi
• fixed MacOS techniques
• fixed Hyper-X mechanism
• fixed C++ standards compatibility issues
• fixed argument handler issues
• improved cpu module
• improved Windows stuff
• various fixes, improvements, and optimisations to many techniques
• merged tons of techniques into one
• modified the scores for many techniques
• removed WMI module with a more efficient replacement
• removed brands:
  • Micorosft x86-to-ARM
  • Apple Rosetta 2
• removed techniques:
  • VM::RDTSC
  • VM::VMWARE_REG
  • VM::VBOX_REG
  • VM::USER
  • VM::VBOX_WINDOW_CLASS
  • VM::LOADED_DLLS
  • VM::KVM_REG
  • VM::KVM_DRIVERS
  • VM::AUDIO
  • VM::VMID_0X4
  • VM::PARALLELS_VM
  • VM::QEMU_BRAND
  • VM::VPC_BOARD
  • VM::HYPERV_WMI
  • VM::HYPERV_REG
  • VM::BIOS_SERIAL
  • VM::VALID_MSR
  • VM::QEMU_PROC
  • VM::VPC_PROC
  • VM::HYPERV_BOARD
  • VM::VM_FILES_EXTRA
  • VM::UPTIME
  • VM::HYPERV_BITMASK
  • VM::VMWARE_DMI
  • VM::HYPERV_EVENT_LOGS
  • VM::VMWARE_EVENT_LOGS
  • VM::GPU_CHIPTYPE
  • VM::VM_HDD
  • VM::ACPI_DETECT
  • VM::GPU_NAME
  • VM::VMWARE_DEVICES
  • VM::VMWARE_MEMORY
  • VM::WMI_MODEL
  • VM::WMI_MANUFACTURER
  • VM::WMI_TEMPERATURE
  • VM::CPU_FANS
  • VM::VMWARE_HARDENER
  • VM::WMI_QUERIES

VirusTotal (3/73, as of 21 March 2025)

https://www.virustotal.com/gui/file/2c0ca8096eb59851738f793427326b64961d56f75e5b3f41ce78360020374a2d?nocache=1

The windows binaries were generated here purely from the source code.

Credits

@NotRequiem, this release wouldn't had been possible without him
@Scrut1ny, for useful feedback