Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual…

Heuristic analysis detects viruses by looking for suspicious characteristics, patterns, or behaviors in the code itself, without necessarily executing it in a virtual machine.

Code emulation involves executing suspicious code within a safe, isolated virtual environment or sandbox to monitor its behavior and determine if it exhibits malicious characteristics without affecting the host system.

Scanning (signature-based detection) identifies viruses by comparing the code to a database of known malware signatures, not by executing it in a virtual machine.

Integrity checking verifies the authenticity and unaltered state of files by comparing their current hashes or checksums against a known good baseline, which is not related to executing malicious code in a VM.