# Hypervision Detection

Supports both x86 and x64. Currently implements four techniques:
- Profiling CPUID against FYL2XP1 (most reliable)
- Checking highest low function leaf
- Checking invalid leaf
- Checking for known hypervisor vendors (KVM, HyperV, VMware, Xen, Parallels, VirtualBox)

# VMware
<img src="Screenshots/vmware.png">

</br>

# HyperV
<img src="Screenshots/vmware.png">

</br>

# Anyrun
<img src="Screenshots/anyrun.png">

</br>

# Clean
<img src="Screenshots/clean.png">


# 💵 Want to buy me a Coffee with crypto?
     - Donate BTC at `bc1q048wrqztka5x2syt9mtj68uuf73vqry60s38vf`
     - Donate ETH at `0x86b2C17C94A1E6f35d498d17a37dc1f8A715139b`

# References
* https://secret.club/2020/01/12/battleye-hypervisor-detection.html
* https://secret.club/2020/04/13/how-anti-cheats-detect-system-emulation.html
* https://kb.vmware.com/s/article/1009458
* https://revers.engineering/detecting-hypervisor-presence-on-windows-10/
* https://github.com/Ahora57/Detect-VM-and-Hypervisor/blob/main/DetectVirtualMachineFirstLib/DetectHV.hpp