A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #29842  by Mauronz
 Tue Jan 10, 2017 3:40 pm
hi everyone! I'm looking at a sample that performs anti-emulation by calling SetupDiGetDeviceRegistryProperty(SPDRP_FRIENDLYNAME) and checks for strings like "vbox", "vmware", ...

I can bypass the check in the debugger but is there a way to change the device name from Virtualbox?