zervo/seb-win-refactoring
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added computerIds check

Browse source
This commit is contained in:
user 2023-04-01 20:14:24 +02:00
parent bd145e14b0
commit 1fec696909
1 changed files with 18 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
SafeExamBrowser.SystemComponents/VirtualMachineDetector.cs
View file

@ -11,7 +11,6 @@ using System.Management;
using SafeExamBrowser.Logging.Contracts; using SafeExamBrowser.Logging.Contracts;
using SafeExamBrowser.SystemComponents.Contracts; using SafeExamBrowser.SystemComponents.Contracts;
using Microsoft.Win32; using Microsoft.Win32;
using System;
namespace SafeExamBrowser.SystemComponents namespace SafeExamBrowser.SystemComponents
{ {
@ -58,7 +57,7 @@ namespace SafeExamBrowser.SystemComponents
isVirtualMachine |= manufacturer.Contains("qemu"); isVirtualMachine |= manufacturer.Contains("qemu");
isVirtualMachine |= manufacturer.Contains("vmware"); isVirtualMachine |= manufacturer.Contains("vmware");
isVirtualMachine |= model.Contains("virtualbox"); isVirtualMachine |= model.Contains("virtualbox");
isVirtualMachine |= model.Contains("Q35 +"); isVirtualMachine |= model.Contains("Q35 +"); // qemu
return isVirtualMachine; return isVirtualMachine;
} }
@ -88,7 +87,20 @@ namespace SafeExamBrowser.SystemComponents
isVirtualMachine |= IsVirtualSystemInfo(biosInfo, manufacturer, model); isVirtualMachine |= IsVirtualSystemInfo(biosInfo, manufacturer, model);
// TODO: check computerIds // hardware information of profile throughout installation etc.
RegistryKey computerIds = Microsoft.Win32.Registry.LocalMachine.OpenSubKey($"SYSTEM\\HardwareConfig\\{configId}\\ComputerIds");
if (computerIds == null)
{
continue;
}
foreach (string computerId in computerIds.GetSubKeyNames())
{
// e.g. manufacturer&version&sku&...
string computer = (string)computerIds.GetValue(computerId);
isVirtualMachine |= IsVirtualSystemInfo(computer, computer, computer);
}
} }
} }
@ -121,6 +133,8 @@ namespace SafeExamBrowser.SystemComponents
} }
} }
// TODO: find a way to check BCD registries (to hunt for QEMU HARDDISK) without admin privs
return isVirtualMachine; return isVirtualMachine;
} }
@ -148,13 +162,11 @@ namespace SafeExamBrowser.SystemComponents
var model = systemInfo.Model; var model = systemInfo.Model;
var devices = systemInfo.PlugAndPlayDeviceIds; var devices = systemInfo.PlugAndPlayDeviceIds;
// redundant: registry check (hardware config) // redundant: registry check (hardware config) does this aswell
isVirtualMachine |= IsVirtualSystemInfo(biosInfo, manufacturer, model); isVirtualMachine |= IsVirtualSystemInfo(biosInfo, manufacturer, model);
isVirtualMachine |= IsVirtualWmi(); isVirtualMachine |= IsVirtualWmi();
isVirtualMachine |= IsVirtualRegistry(); isVirtualMachine |= IsVirtualRegistry();
// TODO: system version
if (macAddress != null && macAddress.Count() > 2) if (macAddress != null && macAddress.Count() > 2)
{ {
isVirtualMachine |= macAddress.StartsWith(QEMU_MAC_PREFIX); isVirtualMachine |= macAddress.StartsWith(QEMU_MAC_PREFIX);