Vault 7: Projects
This publication series is about specific projects related to the Vault 7 main publication.
UNCLASSIFIED
Pique Proof-of-Concept (PoC) Report
Anti-Debugging and Anti-Emulation
(U) Checking the MAC for Leading 00:0C:29
(U) The first three groups in a MAC address identify the manufacturer of the network device.
VMWare’s default MAC address identifier groups are 00:0C:29. An easy check is to open a
command prompt and type getmac and look for the VMWare MAC identifier as shown in Figure
9.
Figure 9. VMWare MAC Identifier 00-0C-29
Raytheon Blackbird Technologies, Inc.
19
07 August 2015
Use or disclosure of data contained on this sheet is subject to the restrictions on the title page of this document.
UNCLASSIFIED
2015-07-PoC-Anti_Debugging_and_Anti_Emulation.pdf