Evolution of Malware Sandbox Evasion Tactics – A Retrospective Study September 9, 2019 https://securingtomorrow.mcafee.com...andbox-evasion-tactics-a-retrospective-study/
You can also use this to trick malware into thinking they are being run in a sandbox, HMPA does offer such a feature.