value:  CSPY Downloader can search loaded modules PEB structure file paths Registry keys and memory to determine if it is being debugged or running in a virtual environment. 
name: Virtualization/Sandbox Evasion: System Checks