Generic: BigRamAlloc has been added - tries to allocate big amount of RAM
Generic: UserInputActivity has been added - evasion which utilizes `GetLastInputInfo` API function
Generic: DiskEnum Registry Key chech has been added - checks `System\CurrentControlSet\Services\Disk\Enum` reg key for value `0`=`*virtual`
Generic: Sandbox-like filename check has been added - checks if current file has any of the following patterns in its path: `C:\SELF.EXE`, `.*self\.*`, `.*sample.*`, `.*sandbox.*`, `.*virus.*`, `.*malware.*`
Generic: Processes of AV and research tools check has been added - checks if any of the following processes are running: `avgui.exe`, `avastsvc.exe`, `avastui.exe`, `procmon.exe`, `procmon64.exe`, `procexp.exe`, `procexp64.exe`, `ollydbg.exe`, `windbg.exe`, `avp.exe`, `bdagent.exe`, `bdwtxag.exe`, `dwengine.exe`
Generic: Max Processes number check has been added (disabled)
Generic: Process with a long name check has been added
Hyper-V: CPU HypervisorID check has been added
Parallels: CPU HypervisorID check has been added
QEMU: QEMU DiskEnum Registry Key has been added
Sandboxie: Injected sbiedll module check has been added
VMware: VMWare DiskEnum Registry Key check has been added
Xen: CPU VendorID check has been added
Xen: CPU HypervisorID check has been added
Xen: DiskEnum Registry Key check has been added
Some build warnings have been fixed
Vbox: added MAC address to be checked as means of detection
VMware: added file names to be checked as means of detection
VMware: added registry paths and values to be checked as means of detection
VMware: added running processes to be checked as means of detection
BOCHS: implementation of detection techniques using VEDetection interface
Hyper-V: implementation of detection techniques using VEDetection interface
JoeBox: implementation of detection techniques using VEDetection interface
Parallels: implementation of detection techniques using VEDetection interface
QEMU: implementation of detection techniques using VEDetection interface
Sandboxie: implementation of detection techniques using VEDetection interface
VirtualPC: implementation of detection techniques using VEDetection interface
Wine: implementation of detection techniques using VEDetection interface
Xen: implementation of detection techniques using VEDetection interface
Miscellaneous sandboxes: implementation of detection techniques using VEDetection interface
Added config for BOCHS evasions: checking registry
Added config for Hyper-V evasions: checking registry, global objects in OS
Added config for JoeBox evasions: checking registry, running processes
Added config for Parallels evasions: checking filesystem, registry, firmware tables, running processes, global objects in OS
Added config for QEMU evasions: checking registry, disk name
Added config for Sandboxie evasions: checking registry, global objects in OS
Added config for VirtualPC evasions: checking registry, firmware tables, disk name, running processes, global devices in OS
Added config for Wine evasions: checking registry
Added config for Xen evasions: checking registry, running processes
Added config for miscellaneous VM and sandboxes evasions
Generic: fixed bug in raw mouse activity check
gitignore: updated
chkp-alexeybu