Skip to content

Instantly share code, notes, and snippets.

@icedterminal
Last active October 15, 2025 03:12
Show Gist options
  • Save icedterminal/b0bacf603e93a7274d6f47b23c33d712 to your computer and use it in GitHub Desktop.
Save icedterminal/b0bacf603e93a7274d6f47b23c33d712 to your computer and use it in GitHub Desktop.
Hide VM status in guest OS (VMWare)

Hide VM Identification in VMWare (Stealthy)

Tested using WorkStation Pro 16.x, Windows host and guest, using an Intel CPU.

  1. Create a Windows 10 VM.
  2. Edit VM settings Processor section. Enable (tick) these:
    • Virtualize Intel VT-x/AMD-V
    • Virtualize CPU Performance Counters
    • Virtualize IOMMU
  3. Install Windows 10 in VM.
  4. Install VMWare tools.
  5. Clean shutdown Windows 10 VM.

Manually edit the VMX file. Add the lines below. If already present, simply change the value. VMWare will rearrange the order once the VM is booted.

mce.enable = "TRUE"
vhu.enable = "TRUE"
SMBIOS.reflectHost = "TRUE"
hypervisor.cpuid.v0 = "FALSE"
monitor_control.virtual_rdtsc = "FALSE"
monitor_control.restrict_backdoor = "TRUE"
isolation.tools.getPtrLocation.disable = "TRUE"
isolation.tools.setPtrLocation.disable = "TRUE"
isolation.tools.setVersion.disable = "TRUE"
isolation.tools.getVersion.disable = "TRUE"
isolation.tools.hgfs.disable = "TRUE"

Power on VM. Check Task Manager. If your task manager looks like the image on the left, something went wrong or you made a mistake. Try again. If you task manager looks like the image on the right, your VM status is masked. However, there are other ways to check for a VM. Software that wants to determine if you are, can still do it by other means. This method takes care of most common detection methods.

Incorrect Correct
wrong right

You can also change device names with regedit to appear as a real device in Device Manager. https://www.youtube.com/watch?v=6TM45vNI4Qc

Other VMs

No I do not know how to do this with other VMs nor do I care to invest time trying them. If you use VBox, QEMU, Fusion, Parallels or KVM, you'll have to figure that out on your own. I'm sure Google can help.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment