How do attackers typically perform anti-virtualization checks during malware execution to evade sandbox detection? (Choose one answer)

A. By making outbound C&C connections
B. By disabling network access
C. By querying for system components
D. By making function calls to system DLLs

Correct Answer: C

Brave-Dump Clients Votes

C 100%

Comments

Max 2026-06-16 21:29:57

Selected Answers: C

Anti-virtualization checks are techniques malware uses to detect if it's running inside a virtual machine (VM) or an analysis sandbox. Common methods include:

Calling system DLL functions (such as kernel32.dll, user32.dll, ntdll.dll, etc.).
Querying information about hardware, BIOS, processes, drivers, or virtual devices.
Looking for artifacts characteristic of VMware, VirtualBox, Hyper-V, etc.