- added DBVM (Dark Byte's VM) brand
- added:
VM::DBVM
VM::UD
VM::BLOCKSTEP
- fixed:
VM::SGDT
(0xD0 signature detected false flagging when Hyper-V was not running)VM::SIDT
(top-most byte signature false flagging when Hyper-V was not running)VM::FIRMWARE
(false flagging on Acer Aspire Notebooks while attempting to detect Xen virtual machines)VM::TRAP
(false flagging on AMD CPUs)
- improved:
VM::FIRMWARE
(detections for ACPI KVM's signatures)
VirusTotal results
The Windows binaries were generated in the CI/CD purely from the source code here. Except for the vmaware_debug binary, which was generated using MSVC with the __VMAWARE_DEBUG__
macro
The Linux binaries on the other hand, were generated through the cmake file present in the root directory of the repository.