Disable VMWare Fusion Hypervisor Detection Port Feature

[Billsboard]

Hello, I am running VMWare Fusion 12 with a Windows Guest and a MacOS host. I have a kernel driver that keeps quitting because it can detect through the VMWare port that its running on a VM. Is there anyway that I can disable the VM detection feature?

[scott28tt]

It would depend on how the driver “knows” - there are some custom options you can add to the VMX file, and other tricks I’ve heard of which involve registry hacking, but you can’t fully hide the VM hardware from the guest OS.

[ColoradoMarmot]

Yup, a bunch of malware detects VM's in order to stop analysis.

Most often though, it's a license locked piece of software/hardware that's specifically designed to thwart EULA violations.

[Billsboard]

I was trying to play around with some viruses. Guess I can't.

[Billsboard]

It's just using the port. I don't know how to disable the port though.

[ColoradoMarmot]

Yeah, that's pretty typical of anything that's remotely advanced these days.  Building a forensics lab is way more complicated than we have room for in the thread.  Best to get a consultant in to help you do it.