Merge pull request #106 from LordNoteworthy/Noteworthy

added qemu process check (qemu-ga.exe)
ayoubfaouzi · Apr 24, 2018 · cfa5422 · cfa5422
2 parents af9d45e + 338857e
commit cfa5422
Show file tree

Hide file tree

Showing 6 changed files with 523 additions and 492 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,7 @@
+#### 0.74:
+- Added qemu process check (qemu-ga.exe) thanks to kaganisildak.
+
+
 #### 0.73
 - Bug fix: GetSystemFirmwareTable should take `resultBufferSize` as an argument for the second call.
 - Bug fix: nullref exception in timing.cpp.

diff --git a/README.md b/README.md
@@ -218,6 +218,7 @@ Please, if you encounter any of the anti-analysis tricks which you have seen in
   - prl_cc.exe(Parallels)
   - prl_tools.exe(Parallels)
   - xenservice.exe(Citrix Xen)
+  - qemu-ga.exe (QEMU)
 - **WMI**
   - SELECT * FROM Win32_Bios (SerialNumber) (VMWARE)
   - SELECT * FROM Win32_PnPEntity (DeviceId) (VBOX)

diff --git a/al-khaser/Al-khaser.cpp b/al-khaser/Al-khaser.cpp
@@ -130,6 +130,7 @@ int main(void)
 	if (ENABLE_QEMU_CHECKS) {
 		print_category(TEXT("QEMU Detection"));
 		qemu_reg_key_value();
+		qemu_processes();
 	}
 
 	/* Xen Detection */