[GH-ISSUE #413] Will NoEscape escape Windows Sandbox? #292

Open
opened 2026-05-06 13:18:08 +02:00 by BreizhHardware · 4 comments

Originally created by @txlhx on GitHub (Nov 8, 2025).
Original GitHub issue: https://github.com/Endermanch/MalwareDatabase/issues/413

Hello there!
My question is that if I run NoEscape malware on Windows Sandbox (after turning network off), will it escape or not? Or I am better using a Virual Machine on VirtualBox or VMWare? (or which one is best)

Originally created by @txlhx on GitHub (Nov 8, 2025). Original GitHub issue: https://github.com/Endermanch/MalwareDatabase/issues/413 Hello there! My question is that if I run NoEscape malware on Windows Sandbox (after turning network off), will it escape or not? Or I am better using a Virual Machine on VirtualBox or VMWare? (or which one is best)
Author
Owner

@JHarrison712 commented on GitHub (Nov 9, 2025):

I’d recommend using a full Virtual Machine rather than Windows Sandbox. Windows Sandbox offers some isolation, but it shares parts of the host OS and isn’t designed for handling active malware safely.

Both VirtualBox and VMware Workstation are fine, VMware tends to be a bit more stable and feature-rich, while VirtualBox is free and open-source. For malware testing, either will give you stronger isolation than Windows Sandbox.

<!-- gh-comment-id:3508558499 --> @JHarrison712 commented on GitHub (Nov 9, 2025): I’d recommend using a full Virtual Machine rather than Windows Sandbox. Windows Sandbox offers some isolation, but it shares parts of the host OS and isn’t designed for handling active malware safely. Both VirtualBox and VMware Workstation are fine, VMware tends to be a bit more stable and feature-rich, while VirtualBox is free and open-source. For malware testing, either will give you stronger isolation than Windows Sandbox.
Author
Owner

@Reacherch commented on GitHub (Dec 4, 2025):

using a

try using Virual Box Or VMWare

<!-- gh-comment-id:3613620866 --> @Reacherch commented on GitHub (Dec 4, 2025): > using a try using Virual Box Or VMWare
Author
Owner

@Miygteet commented on GitHub (Dec 8, 2025):

in my honest opinion you should use oracle virtualbox i used it for malware testing and it works

<!-- gh-comment-id:3624863904 --> @Miygteet commented on GitHub (Dec 8, 2025): in my honest opinion you should use oracle virtualbox i used it for malware testing and it works
Author
Owner

@JHarrison712 commented on GitHub (Dec 9, 2025):

@txlhx Did these comments help if so please consider closing this issue?.

<!-- gh-comment-id:3633186747 --> @JHarrison712 commented on GitHub (Dec 9, 2025): @txlhx Did these comments help if so please consider closing this issue?.
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/MalwareDatabase#292
No description provided.